@open-mercato/core 0.7.1-develop.7131.1.20abf9e885 → 0.7.1-develop.7135.1.19bf969756

package/dist/modules/warranty_claims/api/portal/attachments/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/warranty_claims/api/portal/attachments/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { emitCrudSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { getCustomerAuthFromRequest, type CustomerAuthContext } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport { Attachment, AttachmentPartition } from '@open-mercato/core/modules/attachments/data/entities'\nimport { buildAttachmentImageUrl, slugifyAttachmentFileName } from '@open-mercato/core/modules/attachments/lib/imageUrls'\nimport { StorageDriverFactory } from '@open-mercato/core/modules/attachments/lib/drivers'\nimport { checkAttachmentAccess } from '@open-mercato/core/modules/attachments/lib/access'\nimport { attachmentCrudEvents, attachmentCrudIndexer } from '@open-mercato/core/modules/attachments/lib/crud'\nimport { readAttachmentMetadata } from '@open-mercato/core/modules/attachments/lib/metadata'\nimport { clearAttachmentThumbnailCache } from '@open-mercato/core/modules/attachments/lib/thumbnailCache'\nimport { isMultipartRequestWithinUploadLimit } from '@open-mercato/core/modules/attachments/lib/upload-limits'\nimport {\n  isScopedAttachmentUploadError,\n  type ScopedAttachmentUploadErrorCode,\n} from '@open-mercato/core/modules/attachments/lib/scoped-upload-service'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { WarrantyClaim } from '../../../data/entities'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../../commands/shared'\nimport { CUSTOMER_VISIBLE_ATTACHMENT_TAG, isCustomerVisibleAttachment } from '../../../lib/attachmentVisibility'\nimport { loadPortalOwnedClaim } from '../../../lib/portalClaimAccess'\nimport { resolvePortalAttachmentUploadService } from '../../../lib/portalAttachmentUpload'\n\nconst CLAIM_ATTACHMENT_ENTITY_ID = 'warranty_claims:warranty_claim'\nconst logger = createLogger('warranty_claims').child({ route: 'portal-attachments' })\nconst ATTACHMENT_ERROR_TRANSLATIONS: Partial<Record<ScopedAttachmentUploadErrorCode, readonly [string, string]>> = {\n  dangerous_executable: ['attachments.errors.dangerousExecutable', 'Executable file types are not allowed as attachments.'],\n  max_upload_size: ['attachments.errors.maxUploadSize', 'Attachment exceeds the maximum upload size.'],\n  active_content: ['attachments.errors.activeContentBlocked', 'Active content uploads are not allowed.'],\n}\n\nexport const metadata = {\n  GET: { requireAuth: false },\n  POST: { requireAuth: false },\n  PUT: { requireAuth: false },\n  DELETE: { requireAuth: false },\n}\n\nconst attachmentQuerySchema = z.object({\n  claimId: z.string().uuid(),\n  page: z.coerce.number().int().min(1).optional(),\n  pageSize: z.coerce.number().int().min(1).max(100).optional(),\n})\n\nconst uploadBodySchema = z.object({\n  claimId: z.string().uuid(),\n  file: z.string().min(1).describe('Binary file payload; supplied as multipart form-data'),\n})\n\nconst replaceBodySchema = uploadBodySchema.extend({\n  attachmentId: z.string().uuid(),\n})\n\nconst deleteQuerySchema = z.object({\n  attachmentId: z.string().uuid(),\n})\n\ntype PortalContext = {\n  auth: CustomerAuthContext\n  customerId: string\n  tenantId: string\n  organizationId: string\n  em: EntityManager\n  container: Awaited<ReturnType<typeof createRequestContainer>>\n}\n\nfunction toIso(value: Date | string | null | undefined): string | null {\n  if (!value) return null\n  if (value instanceof Date) return value.toISOString()\n  const date = new Date(value)\n  return Number.isNaN(date.getTime()) ? value : date.toISOString()\n}\n\nasync function resolvePortalContext(req: Request): Promise<PortalContext | Response> {\n  const auth = await getCustomerAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.unauthorized' }, { status: 401 })\n  }\n  if (!auth.customerEntityId) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.customerAccountNotLinked' }, { status: 403 })\n  }\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  return {\n    auth,\n    customerId: auth.customerEntityId,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    em,\n    container,\n  }\n}\n\nfunction attachmentAuth(context: PortalContext): NonNullable<AuthContext> {\n  return {\n    sub: context.auth.sub,\n    tenantId: context.tenantId,\n    orgId: context.organizationId,\n    email: context.auth.email,\n  }\n}\n\nasync function loadOwnedClaim(context: PortalContext, claimId: string): Promise<WarrantyClaim | null> {\n  return loadPortalOwnedClaim(\n    context.em,\n    {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      customerId: context.customerId,\n    },\n    claimId,\n  )\n}\n\nasync function runPortalAttachmentGuard(\n  req: Request,\n  context: PortalContext,\n  claimId: string,\n  operation: 'create' | 'update' | 'delete',\n  mutationPayload: Record<string, unknown>,\n): Promise<RouteMutationGuardResult> {\n  return runRouteMutationGuards({\n    container: context.container,\n    req,\n    auth: {\n      userId: context.auth.sub,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      userFeatures: [],\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: claimId,\n      operation,\n      mutationPayload,\n    },\n  })\n}\n\nfunction serializeAttachment(attachment: Attachment) {\n  const metadata = readAttachmentMetadata(attachment.storageMetadata)\n  return {\n    id: attachment.id,\n    url: attachment.url,\n    downloadUrl: `/api/warranty_claims/portal/attachments?attachmentId=${encodeURIComponent(attachment.id)}`,\n    fileName: attachment.fileName,\n    fileSize: attachment.fileSize,\n    mimeType: attachment.mimeType ?? null,\n    partitionCode: attachment.partitionCode,\n    content: attachment.content ?? null,\n    thumbnailUrl: buildAttachmentImageUrl(attachment.id, {\n      width: 320,\n      height: 320,\n      slug: slugifyAttachmentFileName(attachment.fileName),\n    }),\n    tags: metadata.tags ?? [],\n    assignments: metadata.assignments ?? [],\n    createdAt: toIso(attachment.createdAt),\n  }\n}\n\nasync function resolveStorageDriverFactory(context: PortalContext): Promise<StorageDriverFactory> {\n  try {\n    const resolved = context.container.resolve('storageDriverFactory') as StorageDriverFactory | null\n    return resolved ?? new StorageDriverFactory(context.em)\n  } catch {\n    return new StorageDriverFactory(context.em)\n  }\n}\n\nasync function loadOwnedVisibleAttachment(\n  context: PortalContext,\n  attachmentId: string,\n): Promise<{ attachment: Attachment; claim: WarrantyClaim } | null> {\n  const scope = { tenantId: context.tenantId, organizationId: context.organizationId }\n  const attachment = await findOneWithDecryption(\n    context.em,\n    Attachment,\n    {\n      id: attachmentId,\n      entityId: CLAIM_ATTACHMENT_ENTITY_ID,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    {},\n    scope,\n  )\n  if (!attachment) return null\n  const claim = await loadOwnedClaim(context, attachment.recordId)\n  if (!claim) return null\n  if (!isCustomerVisibleAttachment(readAttachmentMetadata(attachment.storageMetadata).tags)) return null\n  return { attachment, claim }\n}\n\nasync function deletePortalAttachment(context: PortalContext, attachment: Attachment): Promise<void> {\n  await context.em.remove(attachment).flush()\n  await clearAttachmentThumbnailCache(attachment.partitionCode, attachment.id).catch((error) => {\n    logger.error('Failed to clean portal attachment thumbnails', { err: error, attachmentId: attachment.id })\n  })\n  if (attachment.storagePath) {\n    try {\n      const driver = await (await resolveStorageDriverFactory(context)).resolveForPartition(attachment.partitionCode, {\n        tenantId: attachment.tenantId ?? context.tenantId,\n        organizationId: attachment.organizationId ?? context.organizationId,\n      })\n      await driver.delete(attachment.partitionCode, attachment.storagePath)\n    } catch (error) {\n      logger.error('Failed to remove portal attachment storage', { err: error, attachmentId: attachment.id })\n    }\n  }\n\n  let dataEngine: DataEngine | null = null\n  try {\n    dataEngine = context.container.resolve<DataEngine>('dataEngine') ?? null\n  } catch {\n    dataEngine = null\n  }\n  if (dataEngine) {\n    await emitCrudSideEffects({\n      dataEngine,\n      action: 'deleted',\n      entity: attachment,\n      identifiers: {\n        id: attachment.id,\n        organizationId: attachment.organizationId ?? null,\n        tenantId: attachment.tenantId ?? null,\n      },\n      events: attachmentCrudEvents,\n      indexer: attachmentCrudIndexer,\n    })\n    await dataEngine.flushOrmEntityChanges()\n  }\n}\n\nasync function streamOwnedAttachment(context: PortalContext, attachmentId: string): Promise<Response> {\n  const owned = await loadOwnedVisibleAttachment(context, attachmentId)\n  if (!owned) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const { attachment } = owned\n  const partition = await context.em.findOne(AttachmentPartition, { code: attachment.partitionCode })\n  if (!partition) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.load_failed' }, { status: 500 })\n  }\n  const access = checkAttachmentAccess(attachmentAuth(context), attachment, partition, { requireAuthForPublic: true })\n  if (!access.ok) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const driver = await (await resolveStorageDriverFactory(context)).resolveForPartition(attachment.partitionCode, {\n    tenantId: attachment.tenantId ?? '',\n    organizationId: attachment.organizationId ?? '',\n  })\n  let buffer: Buffer\n  try {\n    buffer = (await driver.read(attachment.partitionCode, attachment.storagePath)).buffer\n  } catch {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const headers: Record<string, string> = {\n    'Cache-Control': 'private, max-age=60',\n    'Content-Security-Policy': \"default-src 'none'; sandbox\",\n    'Content-Type': 'application/octet-stream',\n    'Content-Disposition': `attachment; filename=\"${slugifyAttachmentFileName(attachment.fileName)}\"`,\n    'X-Content-Type-Options': 'nosniff',\n  }\n  if (attachment.fileSize > 0) headers['Content-Length'] = String(attachment.fileSize)\n  return new NextResponse(new Uint8Array(buffer), { status: 200, headers })\n}\n\nexport async function GET(req: Request) {\n  const contextOrResponse = await resolvePortalContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const url = new URL(req.url)\n  const attachmentId = url.searchParams.get('attachmentId')\n  if (attachmentId) {\n    const attachmentIdParsed = z.string().uuid().safeParse(attachmentId)\n    if (!attachmentIdParsed.success) {\n      return NextResponse.json({ ok: false, error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n    }\n    return streamOwnedAttachment(context, attachmentIdParsed.data)\n  }\n  const parsed = attachmentQuerySchema.safeParse({\n    claimId: url.searchParams.get('claimId') ?? undefined,\n    page: url.searchParams.get('page') ?? undefined,\n    pageSize: url.searchParams.get('pageSize') ?? undefined,\n  })\n  if (!parsed.success) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n  }\n  const claim = await loadOwnedClaim(context, parsed.data.claimId)\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const filter = {\n    entityId: CLAIM_ATTACHMENT_ENTITY_ID,\n    recordId: claim.id,\n    tenantId: context.tenantId,\n    organizationId: context.organizationId,\n  }\n  const page = parsed.data.page ?? 1\n  const pageSize = parsed.data.pageSize ?? 100\n  const attachments = await findWithDecryption(\n    context.em,\n    Attachment,\n    filter,\n    { orderBy: { createdAt: 'DESC' } },\n    { tenantId: context.tenantId, organizationId: context.organizationId },\n  )\n  const partitionCodes = Array.from(new Set(attachments.map((attachment) => attachment.partitionCode)))\n  const partitions = partitionCodes.length\n    ? await context.em.find(AttachmentPartition, { code: { $in: partitionCodes } })\n    : []\n  const partitionsByCode = new Map(partitions.map((partition) => [partition.code, partition]))\n  const auth = attachmentAuth(context)\n  const visible = attachments.filter((attachment) => {\n    const partition = partitionsByCode.get(attachment.partitionCode)\n    if (!partition) return false\n    if (!isCustomerVisibleAttachment(readAttachmentMetadata(attachment.storageMetadata).tags)) return false\n    return checkAttachmentAccess(auth, attachment, partition, { requireAuthForPublic: true }).ok\n  })\n\n  const pagedVisible = visible.slice((page - 1) * pageSize, page * pageSize)\n\n  return NextResponse.json({\n    items: pagedVisible.map(serializeAttachment),\n    total: visible.length,\n    page,\n    pageSize,\n    totalPages: Math.max(1, Math.ceil(visible.length / pageSize)),\n  })\n}\n\nasync function handleUpload(req: Request, replacement: boolean): Promise<Response> {\n  const contextOrResponse = await resolvePortalContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const contentType = req.headers.get('content-type') || ''\n  if (!contentType.toLowerCase().includes('multipart/form-data')) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n  }\n  if (!isMultipartRequestWithinUploadLimit(req.headers.get('content-length'))) {\n    const { t } = await resolveTranslations()\n    return NextResponse.json({\n      ok: false,\n      error: t('attachments.errors.maxUploadSize', 'Attachment exceeds the maximum upload size.'),\n    }, { status: 413 })\n  }\n\n  const form = await req.formData()\n  const parsed = uploadBodySchema.safeParse({\n    claimId: form.get('claimId') ?? undefined,\n    file: form.get('file') instanceof File ? (form.get('file') as File).name : '',\n  })\n  const parsedAttachmentId = replacement\n    ? z.string().uuid().safeParse(form.get('attachmentId') ?? undefined)\n    : null\n  if (!parsed.success || (replacement && !parsedAttachmentId?.success)) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n  }\n  const claim = await loadOwnedClaim(context, parsed.data.claimId)\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const file = form.get('file')\n  if (!(file instanceof File)) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.portal.detail.fileRequired' }, { status: 400 })\n  }\n  const buffer = Buffer.from(await file.arrayBuffer())\n\n  const attachmentId = replacement && parsedAttachmentId?.success ? parsedAttachmentId.data : null\n  const replacementTarget = attachmentId\n    ? await loadOwnedVisibleAttachment(context, attachmentId)\n    : null\n  if (replacement && (!replacementTarget || replacementTarget.claim.id !== claim.id)) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n\n  const guarded = await runPortalAttachmentGuard(req, context, claim.id, replacement ? 'update' : 'create', {\n    claimId: claim.id,\n    attachmentId,\n    fileName: file.name,\n    fileSize: file.size,\n    mimeType: file.type,\n  })\n  if (!guarded.ok) {\n    return guarded.response\n  }\n\n  const uploadService = resolvePortalAttachmentUploadService(context.container)\n  if (!uploadService) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.portal.detail.attachmentError' }, { status: 503 })\n  }\n\n  let attachment: Attachment\n  try {\n    attachment = await uploadService.upload({\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      entityId: CLAIM_ATTACHMENT_ENTITY_ID,\n      recordId: claim.id,\n      fileName: file.name,\n      buffer,\n      declaredMimeType: file.type,\n      tags: [CUSTOMER_VISIBLE_ATTACHMENT_TAG],\n    })\n  } catch (error) {\n    if (isScopedAttachmentUploadError(error)) {\n      const { t } = await resolveTranslations()\n      const [key, fallback] = ATTACHMENT_ERROR_TRANSLATIONS[error.code]\n        ?? ['warranty_claims.portal.detail.attachmentError', 'Attachment upload failed.']\n      return NextResponse.json(\n        { ok: false, error: t(key, fallback), code: error.code },\n        { status: error.status },\n      )\n    }\n    throw error\n  }\n\n  if (replacementTarget) {\n    await deletePortalAttachment(context, replacementTarget.attachment)\n  }\n  await guarded.runAfterSuccess()\n\n  return NextResponse.json({\n    ok: true,\n    item: {\n      ...serializeAttachment(attachment),\n      entityType: 'attachments:attachment',\n    },\n  })\n}\n\nexport async function POST(req: Request) {\n  return handleUpload(req, false)\n}\n\nexport async function PUT(req: Request) {\n  return handleUpload(req, true)\n}\n\nexport async function DELETE(req: Request) {\n  const contextOrResponse = await resolvePortalContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const url = new URL(req.url)\n  const parsed = deleteQuerySchema.safeParse({\n    attachmentId: url.searchParams.get('attachmentId') ?? undefined,\n  })\n  if (!parsed.success) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.invalidInput' }, { status: 400 })\n  }\n  const owned = await loadOwnedVisibleAttachment(context, parsed.data.attachmentId)\n  if (!owned) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const guarded = await runPortalAttachmentGuard(req, context, owned.claim.id, 'delete', {\n    claimId: owned.claim.id,\n    attachmentId: owned.attachment.id,\n  })\n  if (!guarded.ok) return guarded.response\n\n  await deletePortalAttachment(context, owned.attachment)\n  await guarded.runAfterSuccess()\n  return NextResponse.json({ ok: true })\n}\n\nconst assignmentSchema = z.object({\n  type: z.string(),\n  id: z.string(),\n  href: z.string().nullable().optional(),\n  label: z.string().nullable().optional(),\n})\n\nconst attachmentItemSchema = z.object({\n  id: z.string(),\n  url: z.string(),\n  downloadUrl: z.string(),\n  fileName: z.string(),\n  fileSize: z.number().int().nonnegative(),\n  mimeType: z.string().nullable(),\n  partitionCode: z.string(),\n  content: z.string().nullable(),\n  thumbnailUrl: z.string(),\n  tags: z.array(z.string()),\n  assignments: z.array(assignmentSchema),\n  createdAt: z.string().nullable(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim attachments',\n  methods: {\n    GET: {\n      summary: 'List attachments for an owned claim',\n      query: attachmentQuerySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Claim attachments',\n          schema: z.object({ items: z.array(attachmentItemSchema) }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Upload an attachment for an owned claim',\n      requestBody: { contentType: 'multipart/form-data', schema: uploadBodySchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Attachment uploaded',\n          schema: z.object({ ok: z.boolean(), item: attachmentItemSchema.extend({ entityType: z.string() }) }),\n        },\n      ],\n    },\n    PUT: {\n      summary: 'Replace an attachment on an owned claim',\n      requestBody: { contentType: 'multipart/form-data', schema: replaceBodySchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Attachment replaced',\n          schema: z.object({ ok: z.boolean(), item: attachmentItemSchema.extend({ entityType: z.string() }) }),\n        },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete an attachment from an owned claim',\n      query: deleteQuerySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Attachment deleted',\n          schema: z.object({ ok: z.literal(true) }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,8BAA8B;AAEvC,SAAS,2BAA2B;AACpC,SAAS,8BAA6D;AACtE,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,oBAAoB;AAC7B,SAAS,kCAA4D;AACrE,SAAS,YAAY,2BAA2B;AAChD,SAAS,yBAAyB,iCAAiC;AACnE,SAAS,4BAA4B;AACrC,SAAS,6BAA6B;AACtC,SAAS,sBAAsB,6BAA6B;AAC5D,SAAS,8BAA8B;AACvC,SAAS,qCAAqC;AAC9C,SAAS,2CAA2C;AACpD;AAAA,EACE;AAAA,OAEK;AAGP,SAAS,oCAAoC;AAC7C,SAAS,iCAAiC,mCAAmC;AAC7E,SAAS,4BAA4B;AACrC,SAAS,4CAA4C;AAErD,MAAM,6BAA6B;AACnC,MAAM,SAAS,aAAa,iBAAiB,EAAE,MAAM,EAAE,OAAO,qBAAqB,CAAC;AACpF,MAAM,gCAA6G;AAAA,EACjH,sBAAsB,CAAC,0CAA0C,uDAAuD;AAAA,EACxH,iBAAiB,CAAC,oCAAoC,6CAA6C;AAAA,EACnG,gBAAgB,CAAC,2CAA2C,yCAAyC;AACvG;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAAA,EAC1B,MAAM,EAAE,aAAa,MAAM;AAAA,EAC3B,KAAK,EAAE,aAAa,MAAM;AAAA,EAC1B,QAAQ,EAAE,aAAa,MAAM;AAC/B;AAEA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,SAAS,EAAE,OAAO,EAAE,KAAK;AAAA,EACzB,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAC7D,CAAC;AAED,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,SAAS,EAAE,OAAO,EAAE,KAAK;AAAA,EACzB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,sDAAsD;AACzF,CAAC;AAED,MAAM,oBAAoB,iBAAiB,OAAO;AAAA,EAChD,cAAc,EAAE,OAAO,EAAE,KAAK;AAChC,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,cAAc,EAAE,OAAO,EAAE,KAAK;AAChC,CAAC;AAWD,SAAS,MAAM,OAAwD;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,YAAY;AACjE;AAEA,eAAe,qBAAqB,KAAiD;AACnF,QAAM,OAAO,MAAM,2BAA2B,GAAG;AACjD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,MAAI,CAAC,KAAK,kBAAkB;AAC1B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kDAAkD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnH;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO;AAAA,IACL;AAAA,IACA,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,eAAe,SAAkD;AACxE,SAAO;AAAA,IACL,KAAK,QAAQ,KAAK;AAAA,IAClB,UAAU,QAAQ;AAAA,IAClB,OAAO,QAAQ;AAAA,IACf,OAAO,QAAQ,KAAK;AAAA,EACtB;AACF;AAEA,eAAe,eAAe,SAAwB,SAAgD;AACpG,SAAO;AAAA,IACL,QAAQ;AAAA,IACR;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,yBACb,KACA,SACA,SACA,WACA,iBACmC;AACnC,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ;AAAA,IACnB;AAAA,IACA,MAAM;AAAA,MACJ,QAAQ,QAAQ,KAAK;AAAA,MACrB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,cAAc,CAAC;AAAA,IACjB;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY;AAAA,MACZ;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,SAAS,oBAAoB,YAAwB;AACnD,QAAMA,YAAW,uBAAuB,WAAW,eAAe;AAClE,SAAO;AAAA,IACL,IAAI,WAAW;AAAA,IACf,KAAK,WAAW;AAAA,IAChB,aAAa,wDAAwD,mBAAmB,WAAW,EAAE,CAAC;AAAA,IACtG,UAAU,WAAW;AAAA,IACrB,UAAU,WAAW;AAAA,IACrB,UAAU,WAAW,YAAY;AAAA,IACjC,eAAe,WAAW;AAAA,IAC1B,SAAS,WAAW,WAAW;AAAA,IAC/B,cAAc,wBAAwB,WAAW,IAAI;AAAA,MACnD,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,MAAM,0BAA0B,WAAW,QAAQ;AAAA,IACrD,CAAC;AAAA,IACD,MAAMA,UAAS,QAAQ,CAAC;AAAA,IACxB,aAAaA,UAAS,eAAe,CAAC;AAAA,IACtC,WAAW,MAAM,WAAW,SAAS;AAAA,EACvC;AACF;AAEA,eAAe,4BAA4B,SAAuD;AAChG,MAAI;AACF,UAAM,WAAW,QAAQ,UAAU,QAAQ,sBAAsB;AACjE,WAAO,YAAY,IAAI,qBAAqB,QAAQ,EAAE;AAAA,EACxD,QAAQ;AACN,WAAO,IAAI,qBAAqB,QAAQ,EAAE;AAAA,EAC5C;AACF;AAEA,eAAe,2BACb,SACA,cACkE;AAClE,QAAM,QAAQ,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AACnF,QAAM,aAAa,MAAM;AAAA,IACvB,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU;AAAA,MACV,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,CAAC;AAAA,IACD;AAAA,EACF;AACA,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,QAAQ,MAAM,eAAe,SAAS,WAAW,QAAQ;AAC/D,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,CAAC,4BAA4B,uBAAuB,WAAW,eAAe,EAAE,IAAI,EAAG,QAAO;AAClG,SAAO,EAAE,YAAY,MAAM;AAC7B;AAEA,eAAe,uBAAuB,SAAwB,YAAuC;AACnG,QAAM,QAAQ,GAAG,OAAO,UAAU,EAAE,MAAM;AAC1C,QAAM,8BAA8B,WAAW,eAAe,WAAW,EAAE,EAAE,MAAM,CAAC,UAAU;AAC5F,WAAO,MAAM,gDAAgD,EAAE,KAAK,OAAO,cAAc,WAAW,GAAG,CAAC;AAAA,EAC1G,CAAC;AACD,MAAI,WAAW,aAAa;AAC1B,QAAI;AACF,YAAM,SAAS,OAAO,MAAM,4BAA4B,OAAO,GAAG,oBAAoB,WAAW,eAAe;AAAA,QAC9G,UAAU,WAAW,YAAY,QAAQ;AAAA,QACzC,gBAAgB,WAAW,kBAAkB,QAAQ;AAAA,MACvD,CAAC;AACD,YAAM,OAAO,OAAO,WAAW,eAAe,WAAW,WAAW;AAAA,IACtE,SAAS,OAAO;AACd,aAAO,MAAM,8CAA8C,EAAE,KAAK,OAAO,cAAc,WAAW,GAAG,CAAC;AAAA,IACxG;AAAA,EACF;AAEA,MAAI,aAAgC;AACpC,MAAI;AACF,iBAAa,QAAQ,UAAU,QAAoB,YAAY,KAAK;AAAA,EACtE,QAAQ;AACN,iBAAa;AAAA,EACf;AACA,MAAI,YAAY;AACd,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,WAAW;AAAA,QACf,gBAAgB,WAAW,kBAAkB;AAAA,QAC7C,UAAU,WAAW,YAAY;AAAA,MACnC;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AACD,UAAM,WAAW,sBAAsB;AAAA,EACzC;AACF;AAEA,eAAe,sBAAsB,SAAwB,cAAyC;AACpG,QAAM,QAAQ,MAAM,2BAA2B,SAAS,YAAY;AACpE,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,EAAE,WAAW,IAAI;AACvB,QAAM,YAAY,MAAM,QAAQ,GAAG,QAAQ,qBAAqB,EAAE,MAAM,WAAW,cAAc,CAAC;AAClG,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtG;AACA,QAAM,SAAS,sBAAsB,eAAe,OAAO,GAAG,YAAY,WAAW,EAAE,sBAAsB,KAAK,CAAC;AACnH,MAAI,CAAC,OAAO,IAAI;AACd,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,SAAS,OAAO,MAAM,4BAA4B,OAAO,GAAG,oBAAoB,WAAW,eAAe;AAAA,IAC9G,UAAU,WAAW,YAAY;AAAA,IACjC,gBAAgB,WAAW,kBAAkB;AAAA,EAC/C,CAAC;AACD,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,OAAO,KAAK,WAAW,eAAe,WAAW,WAAW,GAAG;AAAA,EACjF,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,UAAkC;AAAA,IACtC,iBAAiB;AAAA,IACjB,2BAA2B;AAAA,IAC3B,gBAAgB;AAAA,IAChB,uBAAuB,yBAAyB,0BAA0B,WAAW,QAAQ,CAAC;AAAA,IAC9F,0BAA0B;AAAA,EAC5B;AACA,MAAI,WAAW,WAAW,EAAG,SAAQ,gBAAgB,IAAI,OAAO,WAAW,QAAQ;AACnF,SAAO,IAAI,aAAa,IAAI,WAAW,MAAM,GAAG,EAAE,QAAQ,KAAK,QAAQ,CAAC;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,eAAe,IAAI,aAAa,IAAI,cAAc;AACxD,MAAI,cAAc;AAChB,UAAM,qBAAqB,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,YAAY;AACnE,QAAI,CAAC,mBAAmB,SAAS;AAC/B,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACvG;AACA,WAAO,sBAAsB,SAAS,mBAAmB,IAAI;AAAA,EAC/D;AACA,QAAM,SAAS,sBAAsB,UAAU;AAAA,IAC7C,SAAS,IAAI,aAAa,IAAI,SAAS,KAAK;AAAA,IAC5C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,EAChD,CAAC;AACD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,QAAM,QAAQ,MAAM,eAAe,SAAS,OAAO,KAAK,OAAO;AAC/D,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,SAAS;AAAA,IACb,UAAU;AAAA,IACV,UAAU,MAAM;AAAA,IAChB,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,EAC1B;AACA,QAAM,OAAO,OAAO,KAAK,QAAQ;AACjC,QAAM,WAAW,OAAO,KAAK,YAAY;AACzC,QAAM,cAAc,MAAM;AAAA,IACxB,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IACjC,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,EACvE;AACA,QAAM,iBAAiB,MAAM,KAAK,IAAI,IAAI,YAAY,IAAI,CAAC,eAAe,WAAW,aAAa,CAAC,CAAC;AACpG,QAAM,aAAa,eAAe,SAC9B,MAAM,QAAQ,GAAG,KAAK,qBAAqB,EAAE,MAAM,EAAE,KAAK,eAAe,EAAE,CAAC,IAC5E,CAAC;AACL,QAAM,mBAAmB,IAAI,IAAI,WAAW,IAAI,CAAC,cAAc,CAAC,UAAU,MAAM,SAAS,CAAC,CAAC;AAC3F,QAAM,OAAO,eAAe,OAAO;AACnC,QAAM,UAAU,YAAY,OAAO,CAAC,eAAe;AACjD,UAAM,YAAY,iBAAiB,IAAI,WAAW,aAAa;AAC/D,QAAI,CAAC,UAAW,QAAO;AACvB,QAAI,CAAC,4BAA4B,uBAAuB,WAAW,eAAe,EAAE,IAAI,EAAG,QAAO;AAClG,WAAO,sBAAsB,MAAM,YAAY,WAAW,EAAE,sBAAsB,KAAK,CAAC,EAAE;AAAA,EAC5F,CAAC;AAED,QAAM,eAAe,QAAQ,OAAO,OAAO,KAAK,UAAU,OAAO,QAAQ;AAEzE,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,aAAa,IAAI,mBAAmB;AAAA,IAC3C,OAAO,QAAQ;AAAA,IACf;AAAA,IACA;AAAA,IACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,SAAS,QAAQ,CAAC;AAAA,EAC9D,CAAC;AACH;AAEA,eAAe,aAAa,KAAc,aAAyC;AACjF,QAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,cAAc,IAAI,QAAQ,IAAI,cAAc,KAAK;AACvD,MAAI,CAAC,YAAY,YAAY,EAAE,SAAS,qBAAqB,GAAG;AAC9D,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,MAAI,CAAC,oCAAoC,IAAI,QAAQ,IAAI,gBAAgB,CAAC,GAAG;AAC3E,UAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,OAAO,EAAE,oCAAoC,6CAA6C;AAAA,IAC5F,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAEA,QAAM,OAAO,MAAM,IAAI,SAAS;AAChC,QAAM,SAAS,iBAAiB,UAAU;AAAA,IACxC,SAAS,KAAK,IAAI,SAAS,KAAK;AAAA,IAChC,MAAM,KAAK,IAAI,MAAM,aAAa,OAAQ,KAAK,IAAI,MAAM,EAAW,OAAO;AAAA,EAC7E,CAAC;AACD,QAAM,qBAAqB,cACvB,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,KAAK,IAAI,cAAc,KAAK,MAAS,IACjE;AACJ,MAAI,CAAC,OAAO,WAAY,eAAe,CAAC,oBAAoB,SAAU;AACpE,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,QAAM,QAAQ,MAAM,eAAe,SAAS,OAAO,KAAK,OAAO;AAC/D,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,OAAO,KAAK,IAAI,MAAM;AAC5B,MAAI,EAAE,gBAAgB,OAAO;AAC3B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,6CAA6C,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC9G;AACA,QAAM,SAAS,OAAO,KAAK,MAAM,KAAK,YAAY,CAAC;AAEnD,QAAM,eAAe,eAAe,oBAAoB,UAAU,mBAAmB,OAAO;AAC5F,QAAM,oBAAoB,eACtB,MAAM,2BAA2B,SAAS,YAAY,IACtD;AACJ,MAAI,gBAAgB,CAAC,qBAAqB,kBAAkB,MAAM,OAAO,MAAM,KAAK;AAClF,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AAEA,QAAM,UAAU,MAAM,yBAAyB,KAAK,SAAS,MAAM,IAAI,cAAc,WAAW,UAAU;AAAA,IACxG,SAAS,MAAM;AAAA,IACf;AAAA,IACA,UAAU,KAAK;AAAA,IACf,UAAU,KAAK;AAAA,IACf,UAAU,KAAK;AAAA,EACjB,CAAC;AACD,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,QAAQ;AAAA,EACjB;AAEA,QAAM,gBAAgB,qCAAqC,QAAQ,SAAS;AAC5E,MAAI,CAAC,eAAe;AAClB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,gDAAgD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjH;AAEA,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM,cAAc,OAAO;AAAA,MACtC,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,UAAU;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,UAAU,KAAK;AAAA,MACf;AAAA,MACA,kBAAkB,KAAK;AAAA,MACvB,MAAM,CAAC,+BAA+B;AAAA,IACxC,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,8BAA8B,KAAK,GAAG;AACxC,YAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,YAAM,CAAC,KAAK,QAAQ,IAAI,8BAA8B,MAAM,IAAI,KAC3D,CAAC,iDAAiD,2BAA2B;AAClF,aAAO,aAAa;AAAA,QAClB,EAAE,IAAI,OAAO,OAAO,EAAE,KAAK,QAAQ,GAAG,MAAM,MAAM,KAAK;AAAA,QACvD,EAAE,QAAQ,MAAM,OAAO;AAAA,MACzB;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAEA,MAAI,mBAAmB;AACrB,UAAM,uBAAuB,SAAS,kBAAkB,UAAU;AAAA,EACpE;AACA,QAAM,QAAQ,gBAAgB;AAE9B,SAAO,aAAa,KAAK;AAAA,IACvB,IAAI;AAAA,IACJ,MAAM;AAAA,MACJ,GAAG,oBAAoB,UAAU;AAAA,MACjC,YAAY;AAAA,IACd;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,SAAO,aAAa,KAAK,KAAK;AAChC;AAEA,eAAsB,IAAI,KAAc;AACtC,SAAO,aAAa,KAAK,IAAI;AAC/B;AAEA,eAAsB,OAAO,KAAc;AACzC,QAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,kBAAkB,UAAU;AAAA,IACzC,cAAc,IAAI,aAAa,IAAI,cAAc,KAAK;AAAA,EACxD,CAAC;AACD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,QAAM,QAAQ,MAAM,2BAA2B,SAAS,OAAO,KAAK,YAAY;AAChF,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,UAAU,MAAM,yBAAyB,KAAK,SAAS,MAAM,MAAM,IAAI,UAAU;AAAA,IACrF,SAAS,MAAM,MAAM;AAAA,IACrB,cAAc,MAAM,WAAW;AAAA,EACjC,CAAC;AACD,MAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAEhC,QAAM,uBAAuB,SAAS,MAAM,UAAU;AACtD,QAAM,QAAQ,gBAAgB;AAC9B,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,MAAM,EAAE,OAAO;AAAA,EACf,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AACxC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,OAAO;AAAA,EACb,KAAK,EAAE,OAAO;AAAA,EACd,aAAa,EAAE,OAAO;AAAA,EACtB,UAAU,EAAE,OAAO;AAAA,EACnB,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACvC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,eAAe,EAAE,OAAO;AAAA,EACxB,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,cAAc,EAAE,OAAO;AAAA,EACvB,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EACxB,aAAa,EAAE,MAAM,gBAAgB;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,EAAE,CAAC;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,uBAAuB,QAAQ,iBAAiB;AAAA,MAC5E,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,qBAAqB,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAAA,QACrG;AAAA,MACF;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,uBAAuB,QAAQ,kBAAkB;AAAA,MAC7E,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,qBAAqB,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAAA,QACrG;AAAA,MACF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;AAAA,QAC1C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { emitCrudSideEffects } from '@open-mercato/shared/lib/commands/helpers'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { CustomerAuthContext } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport { Attachment, AttachmentPartition } from '@open-mercato/core/modules/attachments/data/entities'\nimport { buildAttachmentImageUrl, slugifyAttachmentFileName } from '@open-mercato/core/modules/attachments/lib/imageUrls'\nimport { StorageDriverFactory } from '@open-mercato/core/modules/attachments/lib/drivers'\nimport { checkAttachmentAccess } from '@open-mercato/core/modules/attachments/lib/access'\nimport { attachmentCrudEvents, attachmentCrudIndexer } from '@open-mercato/core/modules/attachments/lib/crud'\nimport { readAttachmentMetadata } from '@open-mercato/core/modules/attachments/lib/metadata'\nimport { clearAttachmentThumbnailCache } from '@open-mercato/core/modules/attachments/lib/thumbnailCache'\nimport { isMultipartRequestWithinUploadLimit } from '@open-mercato/core/modules/attachments/lib/upload-limits'\nimport {\n  isScopedAttachmentUploadError,\n  type ScopedAttachmentUploadErrorCode,\n} from '@open-mercato/core/modules/attachments/lib/scoped-upload-service'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { WarrantyClaim } from '../../../data/entities'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../../commands/shared'\nimport { CUSTOMER_VISIBLE_ATTACHMENT_TAG, isCustomerVisibleAttachment } from '../../../lib/attachmentVisibility'\nimport { loadPortalOwnedClaim } from '../../../lib/portalClaimAccess'\nimport { resolvePortalAttachmentUploadService } from '../../../lib/portalAttachmentUpload'\nimport { resolveLinkedCustomerAuth } from '../../../lib/portalAuthGuard'\n\nconst CLAIM_ATTACHMENT_ENTITY_ID = 'warranty_claims:warranty_claim'\nconst logger = createLogger('warranty_claims').child({ route: 'portal-attachments' })\nconst ATTACHMENT_ERROR_TRANSLATIONS: Partial<Record<ScopedAttachmentUploadErrorCode, readonly [string, string]>> = {\n  dangerous_executable: ['attachments.errors.dangerousExecutable', 'Executable file types are not allowed as attachments.'],\n  max_upload_size: ['attachments.errors.maxUploadSize', 'Attachment exceeds the maximum upload size.'],\n  active_content: ['attachments.errors.activeContentBlocked', 'Active content uploads are not allowed.'],\n}\n\nexport const metadata = {\n  GET: { requireAuth: false },\n  POST: { requireAuth: false },\n  PUT: { requireAuth: false },\n  DELETE: { requireAuth: false },\n}\n\nconst attachmentQuerySchema = z.object({\n  claimId: z.string().uuid(),\n  page: z.coerce.number().int().min(1).optional(),\n  pageSize: z.coerce.number().int().min(1).max(100).optional(),\n})\n\nconst uploadBodySchema = z.object({\n  claimId: z.string().uuid(),\n  file: z.string().min(1).describe('Binary file payload; supplied as multipart form-data'),\n})\n\nconst replaceBodySchema = uploadBodySchema.extend({\n  attachmentId: z.string().uuid(),\n})\n\nconst deleteQuerySchema = z.object({\n  attachmentId: z.string().uuid(),\n})\n\ntype PortalContext = {\n  auth: CustomerAuthContext\n  customerId: string\n  tenantId: string\n  organizationId: string\n  em: EntityManager\n  container: Awaited<ReturnType<typeof createRequestContainer>>\n}\n\nfunction toIso(value: Date | string | null | undefined): string | null {\n  if (!value) return null\n  if (value instanceof Date) return value.toISOString()\n  const date = new Date(value)\n  return Number.isNaN(date.getTime()) ? value : date.toISOString()\n}\n\nasync function resolvePortalContext(req: Request): Promise<PortalContext | Response> {\n  const authOrResponse = await resolveLinkedCustomerAuth(req)\n  if (authOrResponse instanceof Response) return authOrResponse\n  const auth = authOrResponse\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  return {\n    auth,\n    customerId: auth.customerEntityId,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    em,\n    container,\n  }\n}\n\nfunction attachmentAuth(context: PortalContext): NonNullable<AuthContext> {\n  return {\n    sub: context.auth.sub,\n    tenantId: context.tenantId,\n    orgId: context.organizationId,\n    email: context.auth.email,\n  }\n}\n\nasync function loadOwnedClaim(context: PortalContext, claimId: string): Promise<WarrantyClaim | null> {\n  return loadPortalOwnedClaim(\n    context.em,\n    {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      customerId: context.customerId,\n    },\n    claimId,\n  )\n}\n\nasync function runPortalAttachmentGuard(\n  req: Request,\n  context: PortalContext,\n  claimId: string,\n  operation: 'create' | 'update' | 'delete',\n  mutationPayload: Record<string, unknown>,\n): Promise<RouteMutationGuardResult> {\n  return runRouteMutationGuards({\n    container: context.container,\n    req,\n    auth: {\n      userId: context.auth.sub,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      userFeatures: [],\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: claimId,\n      operation,\n      mutationPayload,\n    },\n  })\n}\n\nfunction serializeAttachment(attachment: Attachment) {\n  const metadata = readAttachmentMetadata(attachment.storageMetadata)\n  return {\n    id: attachment.id,\n    url: attachment.url,\n    downloadUrl: `/api/warranty_claims/portal/attachments?attachmentId=${encodeURIComponent(attachment.id)}`,\n    fileName: attachment.fileName,\n    fileSize: attachment.fileSize,\n    mimeType: attachment.mimeType ?? null,\n    partitionCode: attachment.partitionCode,\n    content: attachment.content ?? null,\n    thumbnailUrl: buildAttachmentImageUrl(attachment.id, {\n      width: 320,\n      height: 320,\n      slug: slugifyAttachmentFileName(attachment.fileName),\n    }),\n    tags: metadata.tags ?? [],\n    assignments: metadata.assignments ?? [],\n    createdAt: toIso(attachment.createdAt),\n  }\n}\n\nasync function resolveStorageDriverFactory(context: PortalContext): Promise<StorageDriverFactory> {\n  try {\n    const resolved = context.container.resolve('storageDriverFactory') as StorageDriverFactory | null\n    return resolved ?? new StorageDriverFactory(context.em)\n  } catch {\n    return new StorageDriverFactory(context.em)\n  }\n}\n\nasync function loadOwnedVisibleAttachment(\n  context: PortalContext,\n  attachmentId: string,\n): Promise<{ attachment: Attachment; claim: WarrantyClaim } | null> {\n  const scope = { tenantId: context.tenantId, organizationId: context.organizationId }\n  const attachment = await findOneWithDecryption(\n    context.em,\n    Attachment,\n    {\n      id: attachmentId,\n      entityId: CLAIM_ATTACHMENT_ENTITY_ID,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n    },\n    {},\n    scope,\n  )\n  if (!attachment) return null\n  const claim = await loadOwnedClaim(context, attachment.recordId)\n  if (!claim) return null\n  if (!isCustomerVisibleAttachment(readAttachmentMetadata(attachment.storageMetadata).tags)) return null\n  return { attachment, claim }\n}\n\nasync function deletePortalAttachment(context: PortalContext, attachment: Attachment): Promise<void> {\n  await context.em.remove(attachment).flush()\n  await clearAttachmentThumbnailCache(attachment.partitionCode, attachment.id).catch((error) => {\n    logger.error('Failed to clean portal attachment thumbnails', { err: error, attachmentId: attachment.id })\n  })\n  if (attachment.storagePath) {\n    try {\n      const driver = await (await resolveStorageDriverFactory(context)).resolveForPartition(attachment.partitionCode, {\n        tenantId: attachment.tenantId ?? context.tenantId,\n        organizationId: attachment.organizationId ?? context.organizationId,\n      })\n      await driver.delete(attachment.partitionCode, attachment.storagePath)\n    } catch (error) {\n      logger.error('Failed to remove portal attachment storage', { err: error, attachmentId: attachment.id })\n    }\n  }\n\n  let dataEngine: DataEngine | null = null\n  try {\n    dataEngine = context.container.resolve<DataEngine>('dataEngine') ?? null\n  } catch {\n    dataEngine = null\n  }\n  if (dataEngine) {\n    await emitCrudSideEffects({\n      dataEngine,\n      action: 'deleted',\n      entity: attachment,\n      identifiers: {\n        id: attachment.id,\n        organizationId: attachment.organizationId ?? null,\n        tenantId: attachment.tenantId ?? null,\n      },\n      events: attachmentCrudEvents,\n      indexer: attachmentCrudIndexer,\n    })\n    await dataEngine.flushOrmEntityChanges()\n  }\n}\n\nasync function streamOwnedAttachment(\n  context: PortalContext,\n  attachmentId: string,\n  translate: (key: string, fallback?: string) => string,\n): Promise<Response> {\n  const owned = await loadOwnedVisibleAttachment(context, attachmentId)\n  if (!owned) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.notFound', 'Claim not found.') }, { status: 404 })\n  }\n  const { attachment } = owned\n  const partition = await context.em.findOne(AttachmentPartition, { code: attachment.partitionCode })\n  if (!partition) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.load_failed', 'Failed to load warranty claim data.') }, { status: 500 })\n  }\n  const access = checkAttachmentAccess(attachmentAuth(context), attachment, partition, { requireAuthForPublic: true })\n  if (!access.ok) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.notFound', 'Claim not found.') }, { status: 404 })\n  }\n  const driver = await (await resolveStorageDriverFactory(context)).resolveForPartition(attachment.partitionCode, {\n    tenantId: attachment.tenantId ?? '',\n    organizationId: attachment.organizationId ?? '',\n  })\n  let buffer: Buffer\n  try {\n    buffer = (await driver.read(attachment.partitionCode, attachment.storagePath)).buffer\n  } catch {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.notFound', 'Claim not found.') }, { status: 404 })\n  }\n  const headers: Record<string, string> = {\n    'Cache-Control': 'private, max-age=60',\n    'Content-Security-Policy': \"default-src 'none'; sandbox\",\n    'Content-Type': 'application/octet-stream',\n    'Content-Disposition': `attachment; filename=\"${slugifyAttachmentFileName(attachment.fileName)}\"`,\n    'X-Content-Type-Options': 'nosniff',\n  }\n  if (attachment.fileSize > 0) headers['Content-Length'] = String(attachment.fileSize)\n  return new NextResponse(new Uint8Array(buffer), { status: 200, headers })\n}\n\nexport async function GET(req: Request) {\n  const contextOrResponse = await resolvePortalContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const { translate } = await resolveTranslations()\n  const url = new URL(req.url)\n  const attachmentId = url.searchParams.get('attachmentId')\n  if (attachmentId) {\n    const attachmentIdParsed = z.string().uuid().safeParse(attachmentId)\n    if (!attachmentIdParsed.success) {\n      return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n    }\n    return streamOwnedAttachment(context, attachmentIdParsed.data, translate)\n  }\n  const parsed = attachmentQuerySchema.safeParse({\n    claimId: url.searchParams.get('claimId') ?? undefined,\n    page: url.searchParams.get('page') ?? undefined,\n    pageSize: url.searchParams.get('pageSize') ?? undefined,\n  })\n  if (!parsed.success) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n  }\n  const claim = await loadOwnedClaim(context, parsed.data.claimId)\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.notFound', 'Claim not found.') }, { status: 404 })\n  }\n  const filter = {\n    entityId: CLAIM_ATTACHMENT_ENTITY_ID,\n    recordId: claim.id,\n    tenantId: context.tenantId,\n    organizationId: context.organizationId,\n  }\n  const page = parsed.data.page ?? 1\n  const pageSize = parsed.data.pageSize ?? 100\n  const attachments = await findWithDecryption(\n    context.em,\n    Attachment,\n    filter,\n    { orderBy: { createdAt: 'DESC' } },\n    { tenantId: context.tenantId, organizationId: context.organizationId },\n  )\n  const partitionCodes = Array.from(new Set(attachments.map((attachment) => attachment.partitionCode)))\n  const partitions = partitionCodes.length\n    ? await context.em.find(AttachmentPartition, { code: { $in: partitionCodes } })\n    : []\n  const partitionsByCode = new Map(partitions.map((partition) => [partition.code, partition]))\n  const auth = attachmentAuth(context)\n  const visible = attachments.filter((attachment) => {\n    const partition = partitionsByCode.get(attachment.partitionCode)\n    if (!partition) return false\n    if (!isCustomerVisibleAttachment(readAttachmentMetadata(attachment.storageMetadata).tags)) return false\n    return checkAttachmentAccess(auth, attachment, partition, { requireAuthForPublic: true }).ok\n  })\n\n  const pagedVisible = visible.slice((page - 1) * pageSize, page * pageSize)\n\n  return NextResponse.json({\n    items: pagedVisible.map(serializeAttachment),\n    total: visible.length,\n    page,\n    pageSize,\n    totalPages: Math.max(1, Math.ceil(visible.length / pageSize)),\n  })\n}\n\nasync function handleUpload(req: Request, replacement: boolean): Promise<Response> {\n  const contextOrResponse = await resolvePortalContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const { t, translate } = await resolveTranslations()\n  const contentType = req.headers.get('content-type') || ''\n  if (!contentType.toLowerCase().includes('multipart/form-data')) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n  }\n  if (!isMultipartRequestWithinUploadLimit(req.headers.get('content-length'))) {\n    return NextResponse.json({\n      ok: false,\n      error: t('attachments.errors.maxUploadSize', 'Attachment exceeds the maximum upload size.'),\n    }, { status: 413 })\n  }\n\n  const form = await req.formData()\n  const parsed = uploadBodySchema.safeParse({\n    claimId: form.get('claimId') ?? undefined,\n    file: form.get('file') instanceof File ? (form.get('file') as File).name : '',\n  })\n  const parsedAttachmentId = replacement\n    ? z.string().uuid().safeParse(form.get('attachmentId') ?? undefined)\n    : null\n  if (!parsed.success || (replacement && !parsedAttachmentId?.success)) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n  }\n  const claim = await loadOwnedClaim(context, parsed.data.claimId)\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.notFound', 'Claim not found.') }, { status: 404 })\n  }\n  const file = form.get('file')\n  if (!(file instanceof File)) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.portal.detail.fileRequired', 'Choose a file before uploading.') }, { status: 400 })\n  }\n  const buffer = Buffer.from(await file.arrayBuffer())\n\n  const attachmentId = replacement && parsedAttachmentId?.success ? parsedAttachmentId.data : null\n  const replacementTarget = attachmentId\n    ? await loadOwnedVisibleAttachment(context, attachmentId)\n    : null\n  if (replacement && (!replacementTarget || replacementTarget.claim.id !== claim.id)) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.notFound', 'Claim not found.') }, { status: 404 })\n  }\n\n  const guarded = await runPortalAttachmentGuard(req, context, claim.id, replacement ? 'update' : 'create', {\n    claimId: claim.id,\n    attachmentId,\n    fileName: file.name,\n    fileSize: file.size,\n    mimeType: file.type,\n  })\n  if (!guarded.ok) {\n    return guarded.response\n  }\n\n  const uploadService = resolvePortalAttachmentUploadService(context.container)\n  if (!uploadService) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.portal.detail.attachmentError', 'Attachment upload failed.') }, { status: 503 })\n  }\n\n  let attachment: Attachment\n  try {\n    attachment = await uploadService.upload({\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      entityId: CLAIM_ATTACHMENT_ENTITY_ID,\n      recordId: claim.id,\n      fileName: file.name,\n      buffer,\n      declaredMimeType: file.type,\n      tags: [CUSTOMER_VISIBLE_ATTACHMENT_TAG],\n    })\n  } catch (error) {\n    if (isScopedAttachmentUploadError(error)) {\n      const [key, fallback] = ATTACHMENT_ERROR_TRANSLATIONS[error.code]\n        ?? ['warranty_claims.portal.detail.attachmentError', 'Attachment upload failed.']\n      return NextResponse.json(\n        { ok: false, error: t(key, fallback), code: error.code },\n        { status: error.status },\n      )\n    }\n    throw error\n  }\n\n  if (replacementTarget) {\n    await deletePortalAttachment(context, replacementTarget.attachment)\n  }\n  await guarded.runAfterSuccess()\n\n  return NextResponse.json({\n    ok: true,\n    item: {\n      ...serializeAttachment(attachment),\n      entityType: 'attachments:attachment',\n    },\n  })\n}\n\nexport async function POST(req: Request) {\n  return handleUpload(req, false)\n}\n\nexport async function PUT(req: Request) {\n  return handleUpload(req, true)\n}\n\nexport async function DELETE(req: Request) {\n  const contextOrResponse = await resolvePortalContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const { translate } = await resolveTranslations()\n  const url = new URL(req.url)\n  const parsed = deleteQuerySchema.safeParse({\n    attachmentId: url.searchParams.get('attachmentId') ?? undefined,\n  })\n  if (!parsed.success) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.invalidInput', 'Invalid input') }, { status: 400 })\n  }\n  const owned = await loadOwnedVisibleAttachment(context, parsed.data.attachmentId)\n  if (!owned) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.notFound', 'Claim not found.') }, { status: 404 })\n  }\n  const guarded = await runPortalAttachmentGuard(req, context, owned.claim.id, 'delete', {\n    claimId: owned.claim.id,\n    attachmentId: owned.attachment.id,\n  })\n  if (!guarded.ok) return guarded.response\n\n  await deletePortalAttachment(context, owned.attachment)\n  await guarded.runAfterSuccess()\n  return NextResponse.json({ ok: true })\n}\n\nconst assignmentSchema = z.object({\n  type: z.string(),\n  id: z.string(),\n  href: z.string().nullable().optional(),\n  label: z.string().nullable().optional(),\n})\n\nconst attachmentItemSchema = z.object({\n  id: z.string(),\n  url: z.string(),\n  downloadUrl: z.string(),\n  fileName: z.string(),\n  fileSize: z.number().int().nonnegative(),\n  mimeType: z.string().nullable(),\n  partitionCode: z.string(),\n  content: z.string().nullable(),\n  thumbnailUrl: z.string(),\n  tags: z.array(z.string()),\n  assignments: z.array(assignmentSchema),\n  createdAt: z.string().nullable(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim attachments',\n  methods: {\n    GET: {\n      summary: 'List attachments for an owned claim',\n      query: attachmentQuerySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Claim attachments',\n          schema: z.object({ items: z.array(attachmentItemSchema) }),\n        },\n      ],\n    },\n    POST: {\n      summary: 'Upload an attachment for an owned claim',\n      requestBody: { contentType: 'multipart/form-data', schema: uploadBodySchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Attachment uploaded',\n          schema: z.object({ ok: z.boolean(), item: attachmentItemSchema.extend({ entityType: z.string() }) }),\n        },\n      ],\n    },\n    PUT: {\n      summary: 'Replace an attachment on an owned claim',\n      requestBody: { contentType: 'multipart/form-data', schema: replaceBodySchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Attachment replaced',\n          schema: z.object({ ok: z.boolean(), item: attachmentItemSchema.extend({ entityType: z.string() }) }),\n        },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete an attachment from an owned claim',\n      query: deleteQuerySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Attachment deleted',\n          schema: z.object({ ok: z.literal(true) }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,8BAA8B;AAEvC,SAAS,2BAA2B;AACpC,SAAS,8BAA6D;AACtE,SAAS,2BAA2B;AACpC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,oBAAoB;AAE7B,SAAS,YAAY,2BAA2B;AAChD,SAAS,yBAAyB,iCAAiC;AACnE,SAAS,4BAA4B;AACrC,SAAS,6BAA6B;AACtC,SAAS,sBAAsB,6BAA6B;AAC5D,SAAS,8BAA8B;AACvC,SAAS,qCAAqC;AAC9C,SAAS,2CAA2C;AACpD;AAAA,EACE;AAAA,OAEK;AAGP,SAAS,oCAAoC;AAC7C,SAAS,iCAAiC,mCAAmC;AAC7E,SAAS,4BAA4B;AACrC,SAAS,4CAA4C;AACrD,SAAS,iCAAiC;AAE1C,MAAM,6BAA6B;AACnC,MAAM,SAAS,aAAa,iBAAiB,EAAE,MAAM,EAAE,OAAO,qBAAqB,CAAC;AACpF,MAAM,gCAA6G;AAAA,EACjH,sBAAsB,CAAC,0CAA0C,uDAAuD;AAAA,EACxH,iBAAiB,CAAC,oCAAoC,6CAA6C;AAAA,EACnG,gBAAgB,CAAC,2CAA2C,yCAAyC;AACvG;AAEO,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAAA,EAC1B,MAAM,EAAE,aAAa,MAAM;AAAA,EAC3B,KAAK,EAAE,aAAa,MAAM;AAAA,EAC1B,QAAQ,EAAE,aAAa,MAAM;AAC/B;AAEA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,SAAS,EAAE,OAAO,EAAE,KAAK;AAAA,EACzB,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAC7D,CAAC;AAED,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,SAAS,EAAE,OAAO,EAAE,KAAK;AAAA,EACzB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,sDAAsD;AACzF,CAAC;AAED,MAAM,oBAAoB,iBAAiB,OAAO;AAAA,EAChD,cAAc,EAAE,OAAO,EAAE,KAAK;AAChC,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,cAAc,EAAE,OAAO,EAAE,KAAK;AAChC,CAAC;AAWD,SAAS,MAAM,OAAwD;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,YAAY;AACjE;AAEA,eAAe,qBAAqB,KAAiD;AACnF,QAAM,iBAAiB,MAAM,0BAA0B,GAAG;AAC1D,MAAI,0BAA0B,SAAU,QAAO;AAC/C,QAAM,OAAO;AACb,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO;AAAA,IACL;AAAA,IACA,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,eAAe,SAAkD;AACxE,SAAO;AAAA,IACL,KAAK,QAAQ,KAAK;AAAA,IAClB,UAAU,QAAQ;AAAA,IAClB,OAAO,QAAQ;AAAA,IACf,OAAO,QAAQ,KAAK;AAAA,EACtB;AACF;AAEA,eAAe,eAAe,SAAwB,SAAgD;AACpG,SAAO;AAAA,IACL,QAAQ;AAAA,IACR;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,yBACb,KACA,SACA,SACA,WACA,iBACmC;AACnC,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ;AAAA,IACnB;AAAA,IACA,MAAM;AAAA,MACJ,QAAQ,QAAQ,KAAK;AAAA,MACrB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,cAAc,CAAC;AAAA,IACjB;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY;AAAA,MACZ;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,SAAS,oBAAoB,YAAwB;AACnD,QAAMA,YAAW,uBAAuB,WAAW,eAAe;AAClE,SAAO;AAAA,IACL,IAAI,WAAW;AAAA,IACf,KAAK,WAAW;AAAA,IAChB,aAAa,wDAAwD,mBAAmB,WAAW,EAAE,CAAC;AAAA,IACtG,UAAU,WAAW;AAAA,IACrB,UAAU,WAAW;AAAA,IACrB,UAAU,WAAW,YAAY;AAAA,IACjC,eAAe,WAAW;AAAA,IAC1B,SAAS,WAAW,WAAW;AAAA,IAC/B,cAAc,wBAAwB,WAAW,IAAI;AAAA,MACnD,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,MAAM,0BAA0B,WAAW,QAAQ;AAAA,IACrD,CAAC;AAAA,IACD,MAAMA,UAAS,QAAQ,CAAC;AAAA,IACxB,aAAaA,UAAS,eAAe,CAAC;AAAA,IACtC,WAAW,MAAM,WAAW,SAAS;AAAA,EACvC;AACF;AAEA,eAAe,4BAA4B,SAAuD;AAChG,MAAI;AACF,UAAM,WAAW,QAAQ,UAAU,QAAQ,sBAAsB;AACjE,WAAO,YAAY,IAAI,qBAAqB,QAAQ,EAAE;AAAA,EACxD,QAAQ;AACN,WAAO,IAAI,qBAAqB,QAAQ,EAAE;AAAA,EAC5C;AACF;AAEA,eAAe,2BACb,SACA,cACkE;AAClE,QAAM,QAAQ,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AACnF,QAAM,aAAa,MAAM;AAAA,IACvB,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU;AAAA,MACV,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B;AAAA,IACA,CAAC;AAAA,IACD;AAAA,EACF;AACA,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,QAAQ,MAAM,eAAe,SAAS,WAAW,QAAQ;AAC/D,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,CAAC,4BAA4B,uBAAuB,WAAW,eAAe,EAAE,IAAI,EAAG,QAAO;AAClG,SAAO,EAAE,YAAY,MAAM;AAC7B;AAEA,eAAe,uBAAuB,SAAwB,YAAuC;AACnG,QAAM,QAAQ,GAAG,OAAO,UAAU,EAAE,MAAM;AAC1C,QAAM,8BAA8B,WAAW,eAAe,WAAW,EAAE,EAAE,MAAM,CAAC,UAAU;AAC5F,WAAO,MAAM,gDAAgD,EAAE,KAAK,OAAO,cAAc,WAAW,GAAG,CAAC;AAAA,EAC1G,CAAC;AACD,MAAI,WAAW,aAAa;AAC1B,QAAI;AACF,YAAM,SAAS,OAAO,MAAM,4BAA4B,OAAO,GAAG,oBAAoB,WAAW,eAAe;AAAA,QAC9G,UAAU,WAAW,YAAY,QAAQ;AAAA,QACzC,gBAAgB,WAAW,kBAAkB,QAAQ;AAAA,MACvD,CAAC;AACD,YAAM,OAAO,OAAO,WAAW,eAAe,WAAW,WAAW;AAAA,IACtE,SAAS,OAAO;AACd,aAAO,MAAM,8CAA8C,EAAE,KAAK,OAAO,cAAc,WAAW,GAAG,CAAC;AAAA,IACxG;AAAA,EACF;AAEA,MAAI,aAAgC;AACpC,MAAI;AACF,iBAAa,QAAQ,UAAU,QAAoB,YAAY,KAAK;AAAA,EACtE,QAAQ;AACN,iBAAa;AAAA,EACf;AACA,MAAI,YAAY;AACd,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,aAAa;AAAA,QACX,IAAI,WAAW;AAAA,QACf,gBAAgB,WAAW,kBAAkB;AAAA,QAC7C,UAAU,WAAW,YAAY;AAAA,MACnC;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,IACX,CAAC;AACD,UAAM,WAAW,sBAAsB;AAAA,EACzC;AACF;AAEA,eAAe,sBACb,SACA,cACA,WACmB;AACnB,QAAM,QAAQ,MAAM,2BAA2B,SAAS,YAAY;AACpE,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mCAAmC,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,QAAM,EAAE,WAAW,IAAI;AACvB,QAAM,YAAY,MAAM,QAAQ,GAAG,QAAQ,qBAAqB,EAAE,MAAM,WAAW,cAAc,CAAC;AAClG,MAAI,CAAC,WAAW;AACd,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,sCAAsC,qCAAqC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxJ;AACA,QAAM,SAAS,sBAAsB,eAAe,OAAO,GAAG,YAAY,WAAW,EAAE,sBAAsB,KAAK,CAAC;AACnH,MAAI,CAAC,OAAO,IAAI;AACd,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mCAAmC,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,QAAM,SAAS,OAAO,MAAM,4BAA4B,OAAO,GAAG,oBAAoB,WAAW,eAAe;AAAA,IAC9G,UAAU,WAAW,YAAY;AAAA,IACjC,gBAAgB,WAAW,kBAAkB;AAAA,EAC/C,CAAC;AACD,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,OAAO,KAAK,WAAW,eAAe,WAAW,WAAW,GAAG;AAAA,EACjF,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mCAAmC,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,QAAM,UAAkC;AAAA,IACtC,iBAAiB;AAAA,IACjB,2BAA2B;AAAA,IAC3B,gBAAgB;AAAA,IAChB,uBAAuB,yBAAyB,0BAA0B,WAAW,QAAQ,CAAC;AAAA,IAC9F,0BAA0B;AAAA,EAC5B;AACA,MAAI,WAAW,WAAW,EAAG,SAAQ,gBAAgB,IAAI,OAAO,WAAW,QAAQ;AACnF,SAAO,IAAI,aAAa,IAAI,WAAW,MAAM,GAAG,EAAE,QAAQ,KAAK,QAAQ,CAAC;AAC1E;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,eAAe,IAAI,aAAa,IAAI,cAAc;AACxD,MAAI,cAAc;AAChB,UAAM,qBAAqB,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,YAAY;AACnE,QAAI,CAAC,mBAAmB,SAAS;AAC/B,aAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACnI;AACA,WAAO,sBAAsB,SAAS,mBAAmB,MAAM,SAAS;AAAA,EAC1E;AACA,QAAM,SAAS,sBAAsB,UAAU;AAAA,IAC7C,SAAS,IAAI,aAAa,IAAI,SAAS,KAAK;AAAA,IAC5C,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK;AAAA,IACtC,UAAU,IAAI,aAAa,IAAI,UAAU,KAAK;AAAA,EAChD,CAAC;AACD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnI;AACA,QAAM,QAAQ,MAAM,eAAe,SAAS,OAAO,KAAK,OAAO;AAC/D,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mCAAmC,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,QAAM,SAAS;AAAA,IACb,UAAU;AAAA,IACV,UAAU,MAAM;AAAA,IAChB,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,EAC1B;AACA,QAAM,OAAO,OAAO,KAAK,QAAQ;AACjC,QAAM,WAAW,OAAO,KAAK,YAAY;AACzC,QAAM,cAAc,MAAM;AAAA,IACxB,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,EAAE,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IACjC,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,EACvE;AACA,QAAM,iBAAiB,MAAM,KAAK,IAAI,IAAI,YAAY,IAAI,CAAC,eAAe,WAAW,aAAa,CAAC,CAAC;AACpG,QAAM,aAAa,eAAe,SAC9B,MAAM,QAAQ,GAAG,KAAK,qBAAqB,EAAE,MAAM,EAAE,KAAK,eAAe,EAAE,CAAC,IAC5E,CAAC;AACL,QAAM,mBAAmB,IAAI,IAAI,WAAW,IAAI,CAAC,cAAc,CAAC,UAAU,MAAM,SAAS,CAAC,CAAC;AAC3F,QAAM,OAAO,eAAe,OAAO;AACnC,QAAM,UAAU,YAAY,OAAO,CAAC,eAAe;AACjD,UAAM,YAAY,iBAAiB,IAAI,WAAW,aAAa;AAC/D,QAAI,CAAC,UAAW,QAAO;AACvB,QAAI,CAAC,4BAA4B,uBAAuB,WAAW,eAAe,EAAE,IAAI,EAAG,QAAO;AAClG,WAAO,sBAAsB,MAAM,YAAY,WAAW,EAAE,sBAAsB,KAAK,CAAC,EAAE;AAAA,EAC5F,CAAC;AAED,QAAM,eAAe,QAAQ,OAAO,OAAO,KAAK,UAAU,OAAO,QAAQ;AAEzE,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,aAAa,IAAI,mBAAmB;AAAA,IAC3C,OAAO,QAAQ;AAAA,IACf;AAAA,IACA;AAAA,IACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,SAAS,QAAQ,CAAC;AAAA,EAC9D,CAAC;AACH;AAEA,eAAe,aAAa,KAAc,aAAyC;AACjF,QAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,EAAE,GAAG,UAAU,IAAI,MAAM,oBAAoB;AACnD,QAAM,cAAc,IAAI,QAAQ,IAAI,cAAc,KAAK;AACvD,MAAI,CAAC,YAAY,YAAY,EAAE,SAAS,qBAAqB,GAAG;AAC9D,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnI;AACA,MAAI,CAAC,oCAAoC,IAAI,QAAQ,IAAI,gBAAgB,CAAC,GAAG;AAC3E,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,OAAO,EAAE,oCAAoC,6CAA6C;AAAA,IAC5F,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAEA,QAAM,OAAO,MAAM,IAAI,SAAS;AAChC,QAAM,SAAS,iBAAiB,UAAU;AAAA,IACxC,SAAS,KAAK,IAAI,SAAS,KAAK;AAAA,IAChC,MAAM,KAAK,IAAI,MAAM,aAAa,OAAQ,KAAK,IAAI,MAAM,EAAW,OAAO;AAAA,EAC7E,CAAC;AACD,QAAM,qBAAqB,cACvB,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,KAAK,IAAI,cAAc,KAAK,MAAS,IACjE;AACJ,MAAI,CAAC,OAAO,WAAY,eAAe,CAAC,oBAAoB,SAAU;AACpE,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnI;AACA,QAAM,QAAQ,MAAM,eAAe,SAAS,OAAO,KAAK,OAAO;AAC/D,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mCAAmC,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,QAAM,OAAO,KAAK,IAAI,MAAM;AAC5B,MAAI,EAAE,gBAAgB,OAAO;AAC3B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,8CAA8C,iCAAiC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5J;AACA,QAAM,SAAS,OAAO,KAAK,MAAM,KAAK,YAAY,CAAC;AAEnD,QAAM,eAAe,eAAe,oBAAoB,UAAU,mBAAmB,OAAO;AAC5F,QAAM,oBAAoB,eACtB,MAAM,2BAA2B,SAAS,YAAY,IACtD;AACJ,MAAI,gBAAgB,CAAC,qBAAqB,kBAAkB,MAAM,OAAO,MAAM,KAAK;AAClF,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mCAAmC,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AAEA,QAAM,UAAU,MAAM,yBAAyB,KAAK,SAAS,MAAM,IAAI,cAAc,WAAW,UAAU;AAAA,IACxG,SAAS,MAAM;AAAA,IACf;AAAA,IACA,UAAU,KAAK;AAAA,IACf,UAAU,KAAK;AAAA,IACf,UAAU,KAAK;AAAA,EACjB,CAAC;AACD,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,QAAQ;AAAA,EACjB;AAEA,QAAM,gBAAgB,qCAAqC,QAAQ,SAAS;AAC5E,MAAI,CAAC,eAAe;AAClB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,iDAAiD,2BAA2B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzJ;AAEA,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM,cAAc,OAAO;AAAA,MACtC,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,UAAU;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,UAAU,KAAK;AAAA,MACf;AAAA,MACA,kBAAkB,KAAK;AAAA,MACvB,MAAM,CAAC,+BAA+B;AAAA,IACxC,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,8BAA8B,KAAK,GAAG;AACxC,YAAM,CAAC,KAAK,QAAQ,IAAI,8BAA8B,MAAM,IAAI,KAC3D,CAAC,iDAAiD,2BAA2B;AAClF,aAAO,aAAa;AAAA,QAClB,EAAE,IAAI,OAAO,OAAO,EAAE,KAAK,QAAQ,GAAG,MAAM,MAAM,KAAK;AAAA,QACvD,EAAE,QAAQ,MAAM,OAAO;AAAA,MACzB;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAEA,MAAI,mBAAmB;AACrB,UAAM,uBAAuB,SAAS,kBAAkB,UAAU;AAAA,EACpE;AACA,QAAM,QAAQ,gBAAgB;AAE9B,SAAO,aAAa,KAAK;AAAA,IACvB,IAAI;AAAA,IACJ,MAAM;AAAA,MACJ,GAAG,oBAAoB,UAAU;AAAA,MACjC,YAAY;AAAA,IACd;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc;AACvC,SAAO,aAAa,KAAK,KAAK;AAChC;AAEA,eAAsB,IAAI,KAAc;AACtC,SAAO,aAAa,KAAK,IAAI;AAC/B;AAEA,eAAsB,OAAO,KAAc;AACzC,QAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,kBAAkB,UAAU;AAAA,IACzC,cAAc,IAAI,aAAa,IAAI,cAAc,KAAK;AAAA,EACxD,CAAC;AACD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnI;AACA,QAAM,QAAQ,MAAM,2BAA2B,SAAS,OAAO,KAAK,YAAY;AAChF,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mCAAmC,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,QAAM,UAAU,MAAM,yBAAyB,KAAK,SAAS,MAAM,MAAM,IAAI,UAAU;AAAA,IACrF,SAAS,MAAM,MAAM;AAAA,IACrB,cAAc,MAAM,WAAW;AAAA,EACjC,CAAC;AACD,MAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAEhC,QAAM,uBAAuB,SAAS,MAAM,UAAU;AACtD,QAAM,QAAQ,gBAAgB;AAC9B,SAAO,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AACvC;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,MAAM,EAAE,OAAO;AAAA,EACf,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACrC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AACxC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,OAAO;AAAA,EACb,KAAK,EAAE,OAAO;AAAA,EACd,aAAa,EAAE,OAAO;AAAA,EACtB,UAAU,EAAE,OAAO;AAAA,EACnB,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACvC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,eAAe,EAAE,OAAO;AAAA,EACxB,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,cAAc,EAAE,OAAO;AAAA,EACvB,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EACxB,aAAa,EAAE,MAAM,gBAAgB;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,EAAE,CAAC;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,uBAAuB,QAAQ,iBAAiB;AAAA,MAC5E,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,qBAAqB,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAAA,QACrG;AAAA,MACF;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,uBAAuB,QAAQ,kBAAkB;AAAA,MAC7E,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,qBAAqB,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAAA,QACrG;AAAA,MACF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;AAAA,QAC1C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": ["metadata"]
 }

package/dist/modules/warranty_claims/api/portal/claims/[id]/route.js

@@ -2,9 +2,10 @@ import { NextResponse } from "next/server";
 import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { getCustomerAuthFromRequest } from "@open-mercato/core/modules/customer_accounts/lib/customerAuth";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { WarrantyClaimLine } from "../../../../data/entities.js";
 import { loadPortalOwnedClaim } from "../../../../lib/portalClaimAccess.js";
+import { resolveLinkedCustomerAuth } from "../../../../lib/portalAuthGuard.js";
 const metadata = {
   GET: { requireAuth: false }
 };
@@ -23,13 +24,9 @@ async function resolveClaimId(ctx) {
   }
 }
 async function resolvePortalContext(req) {
-  const auth = await getCustomerAuthFromRequest(req);
-  if (!auth) {
-    return NextResponse.json({ ok: false, error: "warranty_claims.errors.unauthorized" }, { status: 401 });
-  }
-  if (!auth.customerEntityId) {
-    return NextResponse.json({ ok: false, error: "warranty_claims.errors.customerAccountNotLinked" }, { status: 403 });
-  }
+  const authOrResponse = await resolveLinkedCustomerAuth(req);
+  if (authOrResponse instanceof Response) return authOrResponse;
+  const auth = authOrResponse;
   const container = await createRequestContainer();
   const em = container.resolve("em");
   return {
@@ -88,9 +85,10 @@ async function GET(req, ctx) {
   const contextOrResponse = await resolvePortalContext(req);
   if (contextOrResponse instanceof Response) return contextOrResponse;
   const context = contextOrResponse;
+  const { translate } = await resolveTranslations();
   const claimId = await resolveClaimId(ctx);
   if (!claimId) {
-    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.notFound", "Claim not found.") }, { status: 404 });
   }
   const scope = { tenantId: context.tenantId, organizationId: context.organizationId };
   const claim = await loadPortalOwnedClaim(
@@ -103,7 +101,7 @@ async function GET(req, ctx) {
     claimId
   );
   if (!claim) {
-    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.notFound", "Claim not found.") }, { status: 404 });
   }
   const lines = await findWithDecryption(
     context.em,

package/dist/modules/warranty_claims/api/portal/claims/[id]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/warranty_claims/api/portal/claims/%5Bid%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { getCustomerAuthFromRequest, type CustomerAuthContext } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { WarrantyClaim, WarrantyClaimLine } from '../../../../data/entities'\nimport { loadPortalOwnedClaim } from '../../../../lib/portalClaimAccess'\n\nexport const metadata = {\n  GET: { requireAuth: false },\n}\n\ntype RouteParams = { id: string }\ntype RouteContext = { params: Promise<RouteParams> }\n\ntype PortalContext = {\n  auth: CustomerAuthContext\n  customerId: string\n  tenantId: string\n  organizationId: string\n  em: EntityManager\n}\n\nfunction toIso(value: Date | string | null | undefined): string | null {\n  if (!value) return null\n  if (value instanceof Date) return value.toISOString()\n  const date = new Date(value)\n  return Number.isNaN(date.getTime()) ? value : date.toISOString()\n}\n\nasync function resolveClaimId(ctx: RouteContext): Promise<string | null> {\n  try {\n    const params = await ctx.params\n    return typeof params.id === 'string' && params.id.trim().length ? params.id.trim() : null\n  } catch {\n    return null\n  }\n}\n\nasync function resolvePortalContext(req: Request): Promise<PortalContext | Response> {\n  const auth = await getCustomerAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.unauthorized' }, { status: 401 })\n  }\n  if (!auth.customerEntityId) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.customerAccountNotLinked' }, { status: 403 })\n  }\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  return {\n    auth,\n    customerId: auth.customerEntityId,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    em,\n  }\n}\n\nfunction serializeLine(line: WarrantyClaimLine) {\n  return {\n    id: line.id,\n    lineNo: line.lineNo,\n    productId: line.productId ?? null,\n    sku: line.sku ?? null,\n    productName: line.productName ?? null,\n    orderLineId: line.orderLineId ?? null,\n    serialNumber: line.serialNumber ?? null,\n    faultCode: line.faultCode ?? null,\n    faultDescription: line.faultDescription ?? null,\n    qtyClaimed: line.qtyClaimed,\n    qtyApproved: line.qtyApproved ?? null,\n    disposition: line.disposition ?? null,\n    lineStatus: line.lineStatus,\n    creditAmount: line.creditAmount ?? null,\n    createdAt: toIso(line.createdAt),\n    updatedAt: toIso(line.updatedAt),\n  }\n}\n\nfunction serializeClaim(claim: WarrantyClaim, lines: WarrantyClaimLine[]) {\n  return {\n    id: claim.id,\n    claimNumber: claim.claimNumber,\n    claimType: claim.claimType,\n    status: claim.status,\n    channel: claim.channel,\n    priority: claim.priority,\n    customerId: claim.customerId ?? null,\n    customerName: claim.customerName ?? null,\n    orderId: claim.orderId ?? null,\n    orderNumber: claim.orderNumber ?? null,\n    reasonCode: claim.reasonCode ?? null,\n    rejectionReasonCode: claim.rejectionReasonCode ?? null,\n    resolutionSummary: claim.resolutionSummary ?? null,\n    slaDueAt: toIso(claim.slaDueAt),\n    submittedAt: toIso(claim.submittedAt),\n    resolvedAt: toIso(claim.resolvedAt),\n    closedAt: toIso(claim.closedAt),\n    createdAt: toIso(claim.createdAt),\n    updatedAt: toIso(claim.updatedAt),\n    lines: lines.map(serializeLine),\n  }\n}\n\nexport async function GET(req: Request, ctx: RouteContext) {\n  const contextOrResponse = await resolvePortalContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const claimId = await resolveClaimId(ctx)\n  if (!claimId) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const scope = { tenantId: context.tenantId, organizationId: context.organizationId }\n  const claim = await loadPortalOwnedClaim(\n    context.em,\n    {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      customerId: context.customerId,\n    },\n    claimId,\n  )\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const lines = await findWithDecryption(\n    context.em,\n    WarrantyClaimLine,\n    { claim: claim.id, tenantId: context.tenantId, organizationId: context.organizationId, deletedAt: null },\n    { orderBy: { lineNo: 'ASC' } },\n    scope,\n  )\n  return NextResponse.json({ item: serializeClaim(claim, lines) })\n}\n\nconst lineSchema = z.object({\n  id: z.string().uuid(),\n  lineNo: z.number().int(),\n  productId: z.string().uuid().nullable(),\n  sku: z.string().nullable(),\n  productName: z.string().nullable(),\n  orderLineId: z.string().uuid().nullable(),\n  serialNumber: z.string().nullable(),\n  faultCode: z.string().nullable(),\n  faultDescription: z.string().nullable(),\n  qtyClaimed: z.string(),\n  qtyApproved: z.string().nullable(),\n  disposition: z.string().nullable(),\n  lineStatus: z.string(),\n  creditAmount: z.string().nullable(),\n  createdAt: z.string().nullable(),\n  updatedAt: z.string().nullable(),\n})\n\nconst claimSchema = z.object({\n  id: z.string().uuid(),\n  claimNumber: z.string(),\n  claimType: z.string(),\n  status: z.string(),\n  channel: z.string(),\n  priority: z.string(),\n  customerId: z.string().uuid().nullable(),\n  customerName: z.string().nullable(),\n  orderId: z.string().uuid().nullable(),\n  orderNumber: z.string().nullable(),\n  reasonCode: z.string().nullable(),\n  rejectionReasonCode: z.string().nullable(),\n  resolutionSummary: z.string().nullable(),\n  slaDueAt: z.string().nullable(),\n  submittedAt: z.string().nullable(),\n  resolvedAt: z.string().nullable(),\n  closedAt: z.string().nullable(),\n  createdAt: z.string().nullable(),\n  updatedAt: z.string().nullable(),\n  lines: z.array(lineSchema),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim detail',\n  methods: {\n    GET: {\n      summary: 'Read one authenticated customer claim',\n      responses: [\n        {\n          status: 200,\n          description: 'Customer claim detail',\n          schema: z.object({ item: claimSchema }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,kCAA4D;AAErE,SAAwB,yBAAyB;AACjD,SAAS,4BAA4B;AAE9B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAaA,SAAS,MAAM,OAAwD;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,YAAY;AACjE;AAEA,eAAe,eAAe,KAA2C;AACvE,MAAI;AACF,UAAM,SAAS,MAAM,IAAI;AACzB,WAAO,OAAO,OAAO,OAAO,YAAY,OAAO,GAAG,KAAK,EAAE,SAAS,OAAO,GAAG,KAAK,IAAI;AAAA,EACvF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,qBAAqB,KAAiD;AACnF,QAAM,OAAO,MAAM,2BAA2B,GAAG;AACjD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,MAAI,CAAC,KAAK,kBAAkB;AAC1B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kDAAkD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnH;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO;AAAA,IACL;AAAA,IACA,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB;AAAA,EACF;AACF;AAEA,SAAS,cAAc,MAAyB;AAC9C,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,QAAQ,KAAK;AAAA,IACb,WAAW,KAAK,aAAa;AAAA,IAC7B,KAAK,KAAK,OAAO;AAAA,IACjB,aAAa,KAAK,eAAe;AAAA,IACjC,aAAa,KAAK,eAAe;AAAA,IACjC,cAAc,KAAK,gBAAgB;AAAA,IACnC,WAAW,KAAK,aAAa;AAAA,IAC7B,kBAAkB,KAAK,oBAAoB;AAAA,IAC3C,YAAY,KAAK;AAAA,IACjB,aAAa,KAAK,eAAe;AAAA,IACjC,aAAa,KAAK,eAAe;AAAA,IACjC,YAAY,KAAK;AAAA,IACjB,cAAc,KAAK,gBAAgB;AAAA,IACnC,WAAW,MAAM,KAAK,SAAS;AAAA,IAC/B,WAAW,MAAM,KAAK,SAAS;AAAA,EACjC;AACF;AAEA,SAAS,eAAe,OAAsB,OAA4B;AACxE,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,aAAa,MAAM;AAAA,IACnB,WAAW,MAAM;AAAA,IACjB,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,IACf,UAAU,MAAM;AAAA,IAChB,YAAY,MAAM,cAAc;AAAA,IAChC,cAAc,MAAM,gBAAgB;AAAA,IACpC,SAAS,MAAM,WAAW;AAAA,IAC1B,aAAa,MAAM,eAAe;AAAA,IAClC,YAAY,MAAM,cAAc;AAAA,IAChC,qBAAqB,MAAM,uBAAuB;AAAA,IAClD,mBAAmB,MAAM,qBAAqB;AAAA,IAC9C,UAAU,MAAM,MAAM,QAAQ;AAAA,IAC9B,aAAa,MAAM,MAAM,WAAW;AAAA,IACpC,YAAY,MAAM,MAAM,UAAU;AAAA,IAClC,UAAU,MAAM,MAAM,QAAQ;AAAA,IAC9B,WAAW,MAAM,MAAM,SAAS;AAAA,IAChC,WAAW,MAAM,MAAM,SAAS;AAAA,IAChC,OAAO,MAAM,IAAI,aAAa;AAAA,EAChC;AACF;AAEA,eAAsB,IAAI,KAAc,KAAmB;AACzD,QAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,UAAU,MAAM,eAAe,GAAG;AACxC,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,QAAQ,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AACnF,QAAM,QAAQ,MAAM;AAAA,IAClB,QAAQ;AAAA,IACR;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,QAAQ,MAAM;AAAA,IAClB,QAAQ;AAAA,IACR;AAAA,IACA,EAAE,OAAO,MAAM,IAAI,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,gBAAgB,WAAW,KAAK;AAAA,IACvG,EAAE,SAAS,EAAE,QAAQ,MAAM,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,aAAa,KAAK,EAAE,MAAM,eAAe,OAAO,KAAK,EAAE,CAAC;AACjE;AAEA,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,IAAI;AAAA,EACvB,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,YAAY,EAAE,OAAO;AAAA,EACrB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO;AAAA,EACrB,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,aAAa,EAAE,OAAO;AAAA,EACtB,WAAW,EAAE,OAAO;AAAA,EACpB,QAAQ,EAAE,OAAO;AAAA,EACjB,SAAS,EAAE,OAAO;AAAA,EAClB,UAAU,EAAE,OAAO;AAAA,EACnB,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACvC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,OAAO,EAAE,MAAM,UAAU;AAC3B,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { CustomerAuthContext } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { WarrantyClaim, WarrantyClaimLine } from '../../../../data/entities'\nimport { loadPortalOwnedClaim } from '../../../../lib/portalClaimAccess'\nimport { resolveLinkedCustomerAuth } from '../../../../lib/portalAuthGuard'\n\nexport const metadata = {\n  GET: { requireAuth: false },\n}\n\ntype RouteParams = { id: string }\ntype RouteContext = { params: Promise<RouteParams> }\n\ntype PortalContext = {\n  auth: CustomerAuthContext\n  customerId: string\n  tenantId: string\n  organizationId: string\n  em: EntityManager\n}\n\nfunction toIso(value: Date | string | null | undefined): string | null {\n  if (!value) return null\n  if (value instanceof Date) return value.toISOString()\n  const date = new Date(value)\n  return Number.isNaN(date.getTime()) ? value : date.toISOString()\n}\n\nasync function resolveClaimId(ctx: RouteContext): Promise<string | null> {\n  try {\n    const params = await ctx.params\n    return typeof params.id === 'string' && params.id.trim().length ? params.id.trim() : null\n  } catch {\n    return null\n  }\n}\n\nasync function resolvePortalContext(req: Request): Promise<PortalContext | Response> {\n  const authOrResponse = await resolveLinkedCustomerAuth(req)\n  if (authOrResponse instanceof Response) return authOrResponse\n  const auth = authOrResponse\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  return {\n    auth,\n    customerId: auth.customerEntityId,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    em,\n  }\n}\n\nfunction serializeLine(line: WarrantyClaimLine) {\n  return {\n    id: line.id,\n    lineNo: line.lineNo,\n    productId: line.productId ?? null,\n    sku: line.sku ?? null,\n    productName: line.productName ?? null,\n    orderLineId: line.orderLineId ?? null,\n    serialNumber: line.serialNumber ?? null,\n    faultCode: line.faultCode ?? null,\n    faultDescription: line.faultDescription ?? null,\n    qtyClaimed: line.qtyClaimed,\n    qtyApproved: line.qtyApproved ?? null,\n    disposition: line.disposition ?? null,\n    lineStatus: line.lineStatus,\n    creditAmount: line.creditAmount ?? null,\n    createdAt: toIso(line.createdAt),\n    updatedAt: toIso(line.updatedAt),\n  }\n}\n\nfunction serializeClaim(claim: WarrantyClaim, lines: WarrantyClaimLine[]) {\n  return {\n    id: claim.id,\n    claimNumber: claim.claimNumber,\n    claimType: claim.claimType,\n    status: claim.status,\n    channel: claim.channel,\n    priority: claim.priority,\n    customerId: claim.customerId ?? null,\n    customerName: claim.customerName ?? null,\n    orderId: claim.orderId ?? null,\n    orderNumber: claim.orderNumber ?? null,\n    reasonCode: claim.reasonCode ?? null,\n    rejectionReasonCode: claim.rejectionReasonCode ?? null,\n    resolutionSummary: claim.resolutionSummary ?? null,\n    slaDueAt: toIso(claim.slaDueAt),\n    submittedAt: toIso(claim.submittedAt),\n    resolvedAt: toIso(claim.resolvedAt),\n    closedAt: toIso(claim.closedAt),\n    createdAt: toIso(claim.createdAt),\n    updatedAt: toIso(claim.updatedAt),\n    lines: lines.map(serializeLine),\n  }\n}\n\nexport async function GET(req: Request, ctx: RouteContext) {\n  const contextOrResponse = await resolvePortalContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const { translate } = await resolveTranslations()\n  const claimId = await resolveClaimId(ctx)\n  if (!claimId) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.notFound', 'Claim not found.') }, { status: 404 })\n  }\n  const scope = { tenantId: context.tenantId, organizationId: context.organizationId }\n  const claim = await loadPortalOwnedClaim(\n    context.em,\n    {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      customerId: context.customerId,\n    },\n    claimId,\n  )\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.notFound', 'Claim not found.') }, { status: 404 })\n  }\n  const lines = await findWithDecryption(\n    context.em,\n    WarrantyClaimLine,\n    { claim: claim.id, tenantId: context.tenantId, organizationId: context.organizationId, deletedAt: null },\n    { orderBy: { lineNo: 'ASC' } },\n    scope,\n  )\n  return NextResponse.json({ item: serializeClaim(claim, lines) })\n}\n\nconst lineSchema = z.object({\n  id: z.string().uuid(),\n  lineNo: z.number().int(),\n  productId: z.string().uuid().nullable(),\n  sku: z.string().nullable(),\n  productName: z.string().nullable(),\n  orderLineId: z.string().uuid().nullable(),\n  serialNumber: z.string().nullable(),\n  faultCode: z.string().nullable(),\n  faultDescription: z.string().nullable(),\n  qtyClaimed: z.string(),\n  qtyApproved: z.string().nullable(),\n  disposition: z.string().nullable(),\n  lineStatus: z.string(),\n  creditAmount: z.string().nullable(),\n  createdAt: z.string().nullable(),\n  updatedAt: z.string().nullable(),\n})\n\nconst claimSchema = z.object({\n  id: z.string().uuid(),\n  claimNumber: z.string(),\n  claimType: z.string(),\n  status: z.string(),\n  channel: z.string(),\n  priority: z.string(),\n  customerId: z.string().uuid().nullable(),\n  customerName: z.string().nullable(),\n  orderId: z.string().uuid().nullable(),\n  orderNumber: z.string().nullable(),\n  reasonCode: z.string().nullable(),\n  rejectionReasonCode: z.string().nullable(),\n  resolutionSummary: z.string().nullable(),\n  slaDueAt: z.string().nullable(),\n  submittedAt: z.string().nullable(),\n  resolvedAt: z.string().nullable(),\n  closedAt: z.string().nullable(),\n  createdAt: z.string().nullable(),\n  updatedAt: z.string().nullable(),\n  lines: z.array(lineSchema),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim detail',\n  methods: {\n    GET: {\n      summary: 'Read one authenticated customer claim',\n      responses: [\n        {\n          status: 200,\n          description: 'Customer claim detail',\n          schema: z.object({ item: claimSchema }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AAGpC,SAAwB,yBAAyB;AACjD,SAAS,4BAA4B;AACrC,SAAS,iCAAiC;AAEnC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAaA,SAAS,MAAM,OAAwD;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,YAAY;AACjE;AAEA,eAAe,eAAe,KAA2C;AACvE,MAAI;AACF,UAAM,SAAS,MAAM,IAAI;AACzB,WAAO,OAAO,OAAO,OAAO,YAAY,OAAO,GAAG,KAAK,EAAE,SAAS,OAAO,GAAG,KAAK,IAAI;AAAA,EACvF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,qBAAqB,KAAiD;AACnF,QAAM,iBAAiB,MAAM,0BAA0B,GAAG;AAC1D,MAAI,0BAA0B,SAAU,QAAO;AAC/C,QAAM,OAAO;AACb,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,SAAO;AAAA,IACL;AAAA,IACA,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB;AAAA,EACF;AACF;AAEA,SAAS,cAAc,MAAyB;AAC9C,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,QAAQ,KAAK;AAAA,IACb,WAAW,KAAK,aAAa;AAAA,IAC7B,KAAK,KAAK,OAAO;AAAA,IACjB,aAAa,KAAK,eAAe;AAAA,IACjC,aAAa,KAAK,eAAe;AAAA,IACjC,cAAc,KAAK,gBAAgB;AAAA,IACnC,WAAW,KAAK,aAAa;AAAA,IAC7B,kBAAkB,KAAK,oBAAoB;AAAA,IAC3C,YAAY,KAAK;AAAA,IACjB,aAAa,KAAK,eAAe;AAAA,IACjC,aAAa,KAAK,eAAe;AAAA,IACjC,YAAY,KAAK;AAAA,IACjB,cAAc,KAAK,gBAAgB;AAAA,IACnC,WAAW,MAAM,KAAK,SAAS;AAAA,IAC/B,WAAW,MAAM,KAAK,SAAS;AAAA,EACjC;AACF;AAEA,SAAS,eAAe,OAAsB,OAA4B;AACxE,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,aAAa,MAAM;AAAA,IACnB,WAAW,MAAM;AAAA,IACjB,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,IACf,UAAU,MAAM;AAAA,IAChB,YAAY,MAAM,cAAc;AAAA,IAChC,cAAc,MAAM,gBAAgB;AAAA,IACpC,SAAS,MAAM,WAAW;AAAA,IAC1B,aAAa,MAAM,eAAe;AAAA,IAClC,YAAY,MAAM,cAAc;AAAA,IAChC,qBAAqB,MAAM,uBAAuB;AAAA,IAClD,mBAAmB,MAAM,qBAAqB;AAAA,IAC9C,UAAU,MAAM,MAAM,QAAQ;AAAA,IAC9B,aAAa,MAAM,MAAM,WAAW;AAAA,IACpC,YAAY,MAAM,MAAM,UAAU;AAAA,IAClC,UAAU,MAAM,MAAM,QAAQ;AAAA,IAC9B,WAAW,MAAM,MAAM,SAAS;AAAA,IAChC,WAAW,MAAM,MAAM,SAAS;AAAA,IAChC,OAAO,MAAM,IAAI,aAAa;AAAA,EAChC;AACF;AAEA,eAAsB,IAAI,KAAc,KAAmB;AACzD,QAAM,oBAAoB,MAAM,qBAAqB,GAAG;AACxD,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,UAAU,MAAM,eAAe,GAAG;AACxC,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mCAAmC,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,QAAM,QAAQ,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AACnF,QAAM,QAAQ,MAAM;AAAA,IAClB,QAAQ;AAAA,IACR;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mCAAmC,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,QAAM,QAAQ,MAAM;AAAA,IAClB,QAAQ;AAAA,IACR;AAAA,IACA,EAAE,OAAO,MAAM,IAAI,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,gBAAgB,WAAW,KAAK;AAAA,IACvG,EAAE,SAAS,EAAE,QAAQ,MAAM,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,aAAa,KAAK,EAAE,MAAM,eAAe,OAAO,KAAK,EAAE,CAAC;AACjE;AAEA,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,OAAO,EAAE,IAAI;AAAA,EACvB,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,YAAY,EAAE,OAAO;AAAA,EACrB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO;AAAA,EACrB,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,aAAa,EAAE,OAAO;AAAA,EACtB,WAAW,EAAE,OAAO;AAAA,EACpB,QAAQ,EAAE,OAAO;AAAA,EACjB,SAAS,EAAE,OAAO;AAAA,EAClB,UAAU,EAAE,OAAO;AAAA,EACnB,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACvC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACpC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,OAAO,EAAE,MAAM,UAAU;AAC3B,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/warranty_claims/api/portal/claims/[id]/shared.js

@@ -1,10 +1,9 @@
-import { NextResponse } from "next/server";
 import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
-import { getCustomerAuthFromRequest } from "@open-mercato/core/modules/customer_accounts/lib/customerAuth";
 import { WARRANTY_CLAIM_RESOURCE_KIND } from "../../../../commands/shared.js";
 import { loadPortalOwnedClaim } from "../../../../lib/portalClaimAccess.js";
+import { resolveLinkedCustomerAuth } from "../../../../lib/portalAuthGuard.js";
 const claimIdParamSchema = z.string().uuid();
 async function resolvePortalClaimId(ctx) {
   try {
@@ -16,13 +15,9 @@ async function resolvePortalClaimId(ctx) {
   }
 }
 async function resolvePortalActionContext(req) {
-  const auth = await getCustomerAuthFromRequest(req);
-  if (!auth) {
-    return NextResponse.json({ ok: false, error: "warranty_claims.errors.unauthorized" }, { status: 401 });
-  }
-  if (!auth.customerEntityId) {
-    return NextResponse.json({ ok: false, error: "warranty_claims.errors.customerAccountNotLinked" }, { status: 403 });
-  }
+  const authOrResponse = await resolveLinkedCustomerAuth(req);
+  if (authOrResponse instanceof Response) return authOrResponse;
+  const auth = authOrResponse;
   const container = await createRequestContainer();
   const em = container.resolve("em");
   const commandAuth = {

package/dist/modules/warranty_claims/api/portal/claims/[id]/shared.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/warranty_claims/api/portal/claims/%5Bid%5D/shared.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { getCustomerAuthFromRequest, type CustomerAuthContext } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport { WarrantyClaim } from '../../../../data/entities'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../../../commands/shared'\nimport { loadPortalOwnedClaim } from '../../../../lib/portalClaimAccess'\n\nexport type PortalClaimActionRouteContext = { params: Promise<{ id: string }> }\n\nexport type PortalClaimActionContext = {\n  auth: CustomerAuthContext\n  customerId: string\n  tenantId: string\n  organizationId: string\n  em: EntityManager\n  commandCtx: CommandRuntimeContext\n}\n\nconst claimIdParamSchema = z.string().uuid()\n\nexport async function resolvePortalClaimId(ctx: PortalClaimActionRouteContext): Promise<string | null> {\n  try {\n    const params = await ctx.params\n    const parsed = claimIdParamSchema.safeParse(typeof params.id === 'string' ? params.id.trim() : params.id)\n    return parsed.success ? parsed.data : null\n  } catch {\n    return null\n  }\n}\n\nexport async function resolvePortalActionContext(req: Request): Promise<PortalClaimActionContext | Response> {\n  const auth = await getCustomerAuthFromRequest(req)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.unauthorized' }, { status: 401 })\n  }\n  if (!auth.customerEntityId) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.customerAccountNotLinked' }, { status: 403 })\n  }\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const commandAuth: NonNullable<AuthContext> = {\n    sub: auth.sub,\n    sid: auth.sid,\n    tenantId: auth.tenantId,\n    orgId: auth.orgId,\n    email: auth.email,\n    customerEntityId: auth.customerEntityId ?? null,\n    personEntityId: auth.personEntityId ?? null,\n  }\n  return {\n    auth,\n    customerId: auth.customerEntityId,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    em,\n    commandCtx: {\n      container,\n      auth: commandAuth,\n      organizationScope: null,\n      selectedOrganizationId: auth.orgId,\n      organizationIds: [auth.orgId],\n      request: req,\n    },\n  }\n}\n\nexport async function loadOwnedClaim(\n  context: PortalClaimActionContext,\n  claimId: string,\n): Promise<WarrantyClaim | null> {\n  return loadPortalOwnedClaim(\n    context.em,\n    {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      customerId: context.customerId,\n    },\n    claimId,\n  )\n}\n\nexport async function loadOwnedClaimFresh(\n  context: PortalClaimActionContext,\n  claimId: string,\n): Promise<WarrantyClaim | null> {\n  const em = context.em.fork()\n  return loadPortalOwnedClaim(\n    em,\n    {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      customerId: context.customerId,\n    },\n    claimId,\n  )\n}\n\nexport async function runPortalClaimActionGuard(\n  req: Request,\n  context: PortalClaimActionContext,\n  claimId: string,\n  mutationPayload: Record<string, unknown>,\n): Promise<RouteMutationGuardResult> {\n  return runRouteMutationGuards({\n    container: context.commandCtx.container,\n    req,\n    auth: {\n      userId: context.auth.sub,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      userFeatures: [],\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: claimId,\n      operation: 'custom',\n      mutationPayload,\n    },\n  })\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,8BAA8B;AAEvC,SAAS,8BAA6D;AACtE,SAAS,kCAA4D;AAErE,SAAS,oCAAoC;AAC7C,SAAS,4BAA4B;AAarC,MAAM,qBAAqB,EAAE,OAAO,EAAE,KAAK;AAE3C,eAAsB,qBAAqB,KAA4D;AACrG,MAAI;AACF,UAAM,SAAS,MAAM,IAAI;AACzB,UAAM,SAAS,mBAAmB,UAAU,OAAO,OAAO,OAAO,WAAW,OAAO,GAAG,KAAK,IAAI,OAAO,EAAE;AACxG,WAAO,OAAO,UAAU,OAAO,OAAO;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,2BAA2B,KAA4D;AAC3G,QAAM,OAAO,MAAM,2BAA2B,GAAG;AACjD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,sCAAsC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvG;AACA,MAAI,CAAC,KAAK,kBAAkB;AAC1B,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kDAAkD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnH;AACA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,cAAwC;AAAA,IAC5C,KAAK,KAAK;AAAA,IACV,KAAK,KAAK;AAAA,IACV,UAAU,KAAK;AAAA,IACf,OAAO,KAAK;AAAA,IACZ,OAAO,KAAK;AAAA,IACZ,kBAAkB,KAAK,oBAAoB;AAAA,IAC3C,gBAAgB,KAAK,kBAAkB;AAAA,EACzC;AACA,SAAO;AAAA,IACL;AAAA,IACA,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA,YAAY;AAAA,MACV;AAAA,MACA,MAAM;AAAA,MACN,mBAAmB;AAAA,MACnB,wBAAwB,KAAK;AAAA,MAC7B,iBAAiB,CAAC,KAAK,KAAK;AAAA,MAC5B,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,eAAsB,eACpB,SACA,SAC+B;AAC/B,SAAO;AAAA,IACL,QAAQ;AAAA,IACR;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,oBACpB,SACA,SAC+B;AAC/B,QAAM,KAAK,QAAQ,GAAG,KAAK;AAC3B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,0BACpB,KACA,SACA,SACA,iBACmC;AACnC,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,WAAW;AAAA,IAC9B;AAAA,IACA,MAAM;AAAA,MACJ,QAAQ,QAAQ,KAAK;AAAA,MACrB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,cAAc,CAAC;AAAA,IACjB;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX;AAAA,IACF;AAAA,EACF,CAAC;AACH;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { runRouteMutationGuards, type RouteMutationGuardResult } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport type { CustomerAuthContext } from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport { WarrantyClaim } from '../../../../data/entities'\nimport { WARRANTY_CLAIM_RESOURCE_KIND } from '../../../../commands/shared'\nimport { loadPortalOwnedClaim } from '../../../../lib/portalClaimAccess'\nimport { resolveLinkedCustomerAuth } from '../../../../lib/portalAuthGuard'\n\nexport type PortalClaimActionRouteContext = { params: Promise<{ id: string }> }\n\nexport type PortalClaimActionContext = {\n  auth: CustomerAuthContext\n  customerId: string\n  tenantId: string\n  organizationId: string\n  em: EntityManager\n  commandCtx: CommandRuntimeContext\n}\n\nconst claimIdParamSchema = z.string().uuid()\n\nexport async function resolvePortalClaimId(ctx: PortalClaimActionRouteContext): Promise<string | null> {\n  try {\n    const params = await ctx.params\n    const parsed = claimIdParamSchema.safeParse(typeof params.id === 'string' ? params.id.trim() : params.id)\n    return parsed.success ? parsed.data : null\n  } catch {\n    return null\n  }\n}\n\nexport async function resolvePortalActionContext(req: Request): Promise<PortalClaimActionContext | Response> {\n  const authOrResponse = await resolveLinkedCustomerAuth(req)\n  if (authOrResponse instanceof Response) return authOrResponse\n  const auth = authOrResponse\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const commandAuth: NonNullable<AuthContext> = {\n    sub: auth.sub,\n    sid: auth.sid,\n    tenantId: auth.tenantId,\n    orgId: auth.orgId,\n    email: auth.email,\n    customerEntityId: auth.customerEntityId ?? null,\n    personEntityId: auth.personEntityId ?? null,\n  }\n  return {\n    auth,\n    customerId: auth.customerEntityId,\n    tenantId: auth.tenantId,\n    organizationId: auth.orgId,\n    em,\n    commandCtx: {\n      container,\n      auth: commandAuth,\n      organizationScope: null,\n      selectedOrganizationId: auth.orgId,\n      organizationIds: [auth.orgId],\n      request: req,\n    },\n  }\n}\n\nexport async function loadOwnedClaim(\n  context: PortalClaimActionContext,\n  claimId: string,\n): Promise<WarrantyClaim | null> {\n  return loadPortalOwnedClaim(\n    context.em,\n    {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      customerId: context.customerId,\n    },\n    claimId,\n  )\n}\n\nexport async function loadOwnedClaimFresh(\n  context: PortalClaimActionContext,\n  claimId: string,\n): Promise<WarrantyClaim | null> {\n  const em = context.em.fork()\n  return loadPortalOwnedClaim(\n    em,\n    {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      customerId: context.customerId,\n    },\n    claimId,\n  )\n}\n\nexport async function runPortalClaimActionGuard(\n  req: Request,\n  context: PortalClaimActionContext,\n  claimId: string,\n  mutationPayload: Record<string, unknown>,\n): Promise<RouteMutationGuardResult> {\n  return runRouteMutationGuards({\n    container: context.commandCtx.container,\n    req,\n    auth: {\n      userId: context.auth.sub,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      userFeatures: [],\n    },\n    input: {\n      resourceKind: WARRANTY_CLAIM_RESOURCE_KIND,\n      resourceId: claimId,\n      operation: 'custom',\n      mutationPayload,\n    },\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,8BAA8B;AAEvC,SAAS,8BAA6D;AAGtE,SAAS,oCAAoC;AAC7C,SAAS,4BAA4B;AACrC,SAAS,iCAAiC;AAa1C,MAAM,qBAAqB,EAAE,OAAO,EAAE,KAAK;AAE3C,eAAsB,qBAAqB,KAA4D;AACrG,MAAI;AACF,UAAM,SAAS,MAAM,IAAI;AACzB,UAAM,SAAS,mBAAmB,UAAU,OAAO,OAAO,OAAO,WAAW,OAAO,GAAG,KAAK,IAAI,OAAO,EAAE;AACxG,WAAO,OAAO,UAAU,OAAO,OAAO;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,2BAA2B,KAA4D;AAC3G,QAAM,iBAAiB,MAAM,0BAA0B,GAAG;AAC1D,MAAI,0BAA0B,SAAU,QAAO;AAC/C,QAAM,OAAO;AACb,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,cAAwC;AAAA,IAC5C,KAAK,KAAK;AAAA,IACV,KAAK,KAAK;AAAA,IACV,UAAU,KAAK;AAAA,IACf,OAAO,KAAK;AAAA,IACZ,OAAO,KAAK;AAAA,IACZ,kBAAkB,KAAK,oBAAoB;AAAA,IAC3C,gBAAgB,KAAK,kBAAkB;AAAA,EACzC;AACA,SAAO;AAAA,IACL;AAAA,IACA,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA,YAAY;AAAA,MACV;AAAA,MACA,MAAM;AAAA,MACN,mBAAmB;AAAA,MACnB,wBAAwB,KAAK;AAAA,MAC7B,iBAAiB,CAAC,KAAK,KAAK;AAAA,MAC5B,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,eAAsB,eACpB,SACA,SAC+B;AAC/B,SAAO;AAAA,IACL,QAAQ;AAAA,IACR;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,oBACpB,SACA,SAC+B;AAC/B,QAAM,KAAK,QAAQ,GAAG,KAAK;AAC3B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,YAAY,QAAQ;AAAA,IACtB;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,0BACpB,KACA,SACA,SACA,iBACmC;AACnC,SAAO,uBAAuB;AAAA,IAC5B,WAAW,QAAQ,WAAW;AAAA,IAC9B;AAAA,IACA,MAAM;AAAA,MACJ,QAAQ,QAAQ,KAAK;AAAA,MACrB,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,cAAc,CAAC;AAAA,IACjB;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX;AAAA,IACF;AAAA,EACF,CAAC;AACH;",
   "names": []
 }

package/dist/modules/warranty_claims/api/portal/claims/[id]/submit/route.js

@@ -17,16 +17,16 @@ async function POST(req, ctx) {
   const contextOrResponse = await resolvePortalActionContext(req);
   if (contextOrResponse instanceof Response) return contextOrResponse;
   const context = contextOrResponse;
+  const { translate } = await resolveTranslations();
   const claimId = await resolvePortalClaimId(ctx);
   if (!claimId) {
-    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.notFound", "Claim not found.") }, { status: 404 });
   }
   const claim = await loadOwnedClaim(context, claimId);
   if (!claim) {
-    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.notFound", "Claim not found.") }, { status: 404 });
   }
   if (claim.status !== "draft") {
-    const { translate } = await resolveTranslations();
     return NextResponse.json(
       { ok: false, error: translate("warranty_claims.errors.invalidTransition", "That status change is not allowed.") },
       { status: 400 }

package/dist/modules/warranty_claims/api/portal/claims/[id]/submit/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/warranty_claims/api/portal/claims/%5Bid%5D/submit/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  loadOwnedClaim,\n  loadOwnedClaimFresh,\n  resolvePortalActionContext,\n  resolvePortalClaimId,\n  runPortalClaimActionGuard,\n  type PortalClaimActionRouteContext,\n} from '../shared'\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nexport async function POST(req: Request, ctx: PortalClaimActionRouteContext) {\n  const contextOrResponse = await resolvePortalActionContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const claimId = await resolvePortalClaimId(ctx)\n  if (!claimId) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const claim = await loadOwnedClaim(context, claimId)\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  if (claim.status !== 'draft') {\n    const { translate } = await resolveTranslations()\n    return NextResponse.json(\n      { ok: false, error: translate('warranty_claims.errors.invalidTransition', 'That status change is not allowed.') },\n      { status: 400 },\n    )\n  }\n\n  const guarded = await runPortalClaimActionGuard(req, context, claim.id, {\n    id: claim.id,\n    action: 'submit',\n  })\n  if (!guarded.ok) {\n    return guarded.response\n  }\n\n  const commandBus = context.commandCtx.container.resolve('commandBus') as CommandBus\n  try {\n    await commandBus.execute<{ id: string; actorCustomerId: string }, { claimId: string }>(\n      'warranty_claims.claim.submit',\n      { input: { id: claim.id, actorCustomerId: context.customerId }, ctx: context.commandCtx },\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    throw err\n  }\n\n  await guarded.runAfterSuccess()\n\n  const updated = await loadOwnedClaimFresh(context, claim.id)\n  return NextResponse.json({ ok: true, claimId: claim.id, status: updated?.status ?? 'submitted' })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim submit action',\n  methods: {\n    POST: {\n      summary: 'Submit an owned draft claim from the customer portal',\n      responses: [\n        {\n          status: 200,\n          description: 'Claim submitted',\n          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid(), status: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,uBAAuB;AAChC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAEpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,eAAsB,KAAK,KAAc,KAAoC;AAC3E,QAAM,oBAAoB,MAAM,2BAA2B,GAAG;AAC9D,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,QAAQ,MAAM,eAAe,SAAS,OAAO;AACnD,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,MAAI,MAAM,WAAW,SAAS;AAC5B,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,aAAa;AAAA,MAClB,EAAE,IAAI,OAAO,OAAO,UAAU,4CAA4C,oCAAoC,EAAE;AAAA,MAChH,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,0BAA0B,KAAK,SAAS,MAAM,IAAI;AAAA,IACtE,IAAI,MAAM;AAAA,IACV,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,QAAQ;AAAA,EACjB;AAEA,QAAM,aAAa,QAAQ,WAAW,UAAU,QAAQ,YAAY;AACpE,MAAI;AACF,UAAM,WAAW;AAAA,MACf;AAAA,MACA,EAAE,OAAO,EAAE,IAAI,MAAM,IAAI,iBAAiB,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW;AAAA,IAC1F;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM;AAAA,EACR;AAEA,QAAM,QAAQ,gBAAgB;AAE9B,QAAM,UAAU,MAAM,oBAAoB,SAAS,MAAM,EAAE;AAC3D,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,IAAI,QAAQ,SAAS,UAAU,YAAY,CAAC;AAClG;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC;AAAA,QACtF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  loadOwnedClaim,\n  loadOwnedClaimFresh,\n  resolvePortalActionContext,\n  resolvePortalClaimId,\n  runPortalClaimActionGuard,\n  type PortalClaimActionRouteContext,\n} from '../shared'\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nexport async function POST(req: Request, ctx: PortalClaimActionRouteContext) {\n  const contextOrResponse = await resolvePortalActionContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const { translate } = await resolveTranslations()\n  const claimId = await resolvePortalClaimId(ctx)\n  if (!claimId) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.notFound', 'Claim not found.') }, { status: 404 })\n  }\n  const claim = await loadOwnedClaim(context, claimId)\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.notFound', 'Claim not found.') }, { status: 404 })\n  }\n  if (claim.status !== 'draft') {\n    return NextResponse.json(\n      { ok: false, error: translate('warranty_claims.errors.invalidTransition', 'That status change is not allowed.') },\n      { status: 400 },\n    )\n  }\n\n  const guarded = await runPortalClaimActionGuard(req, context, claim.id, {\n    id: claim.id,\n    action: 'submit',\n  })\n  if (!guarded.ok) {\n    return guarded.response\n  }\n\n  const commandBus = context.commandCtx.container.resolve('commandBus') as CommandBus\n  try {\n    await commandBus.execute<{ id: string; actorCustomerId: string }, { claimId: string }>(\n      'warranty_claims.claim.submit',\n      { input: { id: claim.id, actorCustomerId: context.customerId }, ctx: context.commandCtx },\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    throw err\n  }\n\n  await guarded.runAfterSuccess()\n\n  const updated = await loadOwnedClaimFresh(context, claim.id)\n  return NextResponse.json({ ok: true, claimId: claim.id, status: updated?.status ?? 'submitted' })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim submit action',\n  methods: {\n    POST: {\n      summary: 'Submit an owned draft claim from the customer portal',\n      responses: [\n        {\n          status: 200,\n          description: 'Claim submitted',\n          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid(), status: z.string() }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,uBAAuB;AAChC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAEpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,eAAsB,KAAK,KAAc,KAAoC;AAC3E,QAAM,oBAAoB,MAAM,2BAA2B,GAAG;AAC9D,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mCAAmC,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,QAAM,QAAQ,MAAM,eAAe,SAAS,OAAO;AACnD,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mCAAmC,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,MAAI,MAAM,WAAW,SAAS;AAC5B,WAAO,aAAa;AAAA,MAClB,EAAE,IAAI,OAAO,OAAO,UAAU,4CAA4C,oCAAoC,EAAE;AAAA,MAChH,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,0BAA0B,KAAK,SAAS,MAAM,IAAI;AAAA,IACtE,IAAI,MAAM;AAAA,IACV,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,QAAQ;AAAA,EACjB;AAEA,QAAM,aAAa,QAAQ,WAAW,UAAU,QAAQ,YAAY;AACpE,MAAI;AACF,UAAM,WAAW;AAAA,MACf;AAAA,MACA,EAAE,OAAO,EAAE,IAAI,MAAM,IAAI,iBAAiB,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW;AAAA,IAC1F;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM;AAAA,EACR;AAEA,QAAM,QAAQ,gBAAgB;AAE9B,QAAM,UAAU,MAAM,oBAAoB,SAAS,MAAM,EAAE;AAC3D,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,IAAI,QAAQ,SAAS,UAAU,YAAY,CAAC;AAClG;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC;AAAA,QACtF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/warranty_claims/api/portal/claims/[id]/withdraw/route.js

@@ -17,16 +17,16 @@ async function POST(req, ctx) {
   const contextOrResponse = await resolvePortalActionContext(req);
   if (contextOrResponse instanceof Response) return contextOrResponse;
   const context = contextOrResponse;
+  const { translate } = await resolveTranslations();
   const claimId = await resolvePortalClaimId(ctx);
   if (!claimId) {
-    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.notFound", "Claim not found.") }, { status: 404 });
   }
   const claim = await loadOwnedClaim(context, claimId);
   if (!claim) {
-    return NextResponse.json({ ok: false, error: "warranty_claims.errors.notFound" }, { status: 404 });
+    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.notFound", "Claim not found.") }, { status: 404 });
   }
   if (!PORTAL_WITHDRAWABLE_STATUSES.has(claim.status)) {
-    const { translate } = await resolveTranslations();
     return NextResponse.json(
       { ok: false, error: translate("warranty_claims.errors.invalidTransition", "That status change is not allowed.") },
       { status: 400 }

package/dist/modules/warranty_claims/api/portal/claims/[id]/withdraw/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/warranty_claims/api/portal/claims/%5Bid%5D/withdraw/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { TransitionClaimInput, WarrantyClaimStatus } from '../../../../../data/validators'\nimport {\n  loadOwnedClaim,\n  resolvePortalActionContext,\n  resolvePortalClaimId,\n  runPortalClaimActionGuard,\n  type PortalClaimActionRouteContext,\n} from '../shared'\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst PORTAL_WITHDRAWABLE_STATUSES = new Set<WarrantyClaimStatus>(['draft', 'submitted'])\n\nexport async function POST(req: Request, ctx: PortalClaimActionRouteContext) {\n  const contextOrResponse = await resolvePortalActionContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const claimId = await resolvePortalClaimId(ctx)\n  if (!claimId) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  const claim = await loadOwnedClaim(context, claimId)\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: 'warranty_claims.errors.notFound' }, { status: 404 })\n  }\n  if (!PORTAL_WITHDRAWABLE_STATUSES.has(claim.status)) {\n    const { translate } = await resolveTranslations()\n    return NextResponse.json(\n      { ok: false, error: translate('warranty_claims.errors.invalidTransition', 'That status change is not allowed.') },\n      { status: 400 },\n    )\n  }\n\n  const guarded = await runPortalClaimActionGuard(req, context, claim.id, {\n    id: claim.id,\n    action: 'withdraw',\n    toStatus: 'cancelled',\n  })\n  if (!guarded.ok) {\n    return guarded.response\n  }\n\n  const commandBus = context.commandCtx.container.resolve('commandBus') as CommandBus\n  try {\n    await commandBus.execute<TransitionClaimInput, { claimId: string }>(\n      'warranty_claims.claim.transition',\n      {\n        input: { id: claim.id, toStatus: 'cancelled', actorCustomerId: context.customerId },\n        ctx: context.commandCtx,\n      },\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    throw err\n  }\n\n  await guarded.runAfterSuccess()\n\n  return NextResponse.json({ ok: true, claimId: claim.id, status: 'cancelled' })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim withdraw action',\n  methods: {\n    POST: {\n      summary: 'Withdraw (cancel) an owned claim while it is draft or submitted',\n      responses: [\n        {\n          status: 200,\n          description: 'Claim withdrawn',\n          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid(), status: z.literal('cancelled') }),\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,uBAAuB;AAChC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAGpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,+BAA+B,oBAAI,IAAyB,CAAC,SAAS,WAAW,CAAC;AAExF,eAAsB,KAAK,KAAc,KAAoC;AAC3E,QAAM,oBAAoB,MAAM,2BAA2B,GAAG;AAC9D,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,QAAM,QAAQ,MAAM,eAAe,SAAS,OAAO;AACnD,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACnG;AACA,MAAI,CAAC,6BAA6B,IAAI,MAAM,MAAM,GAAG;AACnD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,aAAa;AAAA,MAClB,EAAE,IAAI,OAAO,OAAO,UAAU,4CAA4C,oCAAoC,EAAE;AAAA,MAChH,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,0BAA0B,KAAK,SAAS,MAAM,IAAI;AAAA,IACtE,IAAI,MAAM;AAAA,IACV,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AACD,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,QAAQ;AAAA,EACjB;AAEA,QAAM,aAAa,QAAQ,WAAW,UAAU,QAAQ,YAAY;AACpE,MAAI;AACF,UAAM,WAAW;AAAA,MACf;AAAA,MACA;AAAA,QACE,OAAO,EAAE,IAAI,MAAM,IAAI,UAAU,aAAa,iBAAiB,QAAQ,WAAW;AAAA,QAClF,KAAK,QAAQ;AAAA,MACf;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM;AAAA,EACR;AAEA,QAAM,QAAQ,gBAAgB;AAE9B,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,IAAI,QAAQ,YAAY,CAAC;AAC/E;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,GAAG,QAAQ,EAAE,QAAQ,WAAW,EAAE,CAAC;AAAA,QAClG;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { TransitionClaimInput, WarrantyClaimStatus } from '../../../../../data/validators'\nimport {\n  loadOwnedClaim,\n  resolvePortalActionContext,\n  resolvePortalClaimId,\n  runPortalClaimActionGuard,\n  type PortalClaimActionRouteContext,\n} from '../shared'\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst PORTAL_WITHDRAWABLE_STATUSES = new Set<WarrantyClaimStatus>(['draft', 'submitted'])\n\nexport async function POST(req: Request, ctx: PortalClaimActionRouteContext) {\n  const contextOrResponse = await resolvePortalActionContext(req)\n  if (contextOrResponse instanceof Response) return contextOrResponse\n  const context = contextOrResponse\n  const { translate } = await resolveTranslations()\n  const claimId = await resolvePortalClaimId(ctx)\n  if (!claimId) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.notFound', 'Claim not found.') }, { status: 404 })\n  }\n  const claim = await loadOwnedClaim(context, claimId)\n  if (!claim) {\n    return NextResponse.json({ ok: false, error: translate('warranty_claims.errors.notFound', 'Claim not found.') }, { status: 404 })\n  }\n  if (!PORTAL_WITHDRAWABLE_STATUSES.has(claim.status)) {\n    return NextResponse.json(\n      { ok: false, error: translate('warranty_claims.errors.invalidTransition', 'That status change is not allowed.') },\n      { status: 400 },\n    )\n  }\n\n  const guarded = await runPortalClaimActionGuard(req, context, claim.id, {\n    id: claim.id,\n    action: 'withdraw',\n    toStatus: 'cancelled',\n  })\n  if (!guarded.ok) {\n    return guarded.response\n  }\n\n  const commandBus = context.commandCtx.container.resolve('commandBus') as CommandBus\n  try {\n    await commandBus.execute<TransitionClaimInput, { claimId: string }>(\n      'warranty_claims.claim.transition',\n      {\n        input: { id: claim.id, toStatus: 'cancelled', actorCustomerId: context.customerId },\n        ctx: context.commandCtx,\n      },\n    )\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    throw err\n  }\n\n  await guarded.runAfterSuccess()\n\n  return NextResponse.json({ ok: true, claimId: claim.id, status: 'cancelled' })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Warranty Claims Portal',\n  summary: 'Customer portal warranty claim withdraw action',\n  methods: {\n    POST: {\n      summary: 'Withdraw (cancel) an owned claim while it is draft or submitted',\n      responses: [\n        {\n          status: 200,\n          description: 'Claim withdrawn',\n          schema: z.object({ ok: z.boolean(), claimId: z.string().uuid(), status: z.literal('cancelled') }),\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,uBAAuB;AAChC,SAAS,0CAA0C;AACnD,SAAS,2BAA2B;AAGpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAEA,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,+BAA+B,oBAAI,IAAyB,CAAC,SAAS,WAAW,CAAC;AAExF,eAAsB,KAAK,KAAc,KAAoC;AAC3E,QAAM,oBAAoB,MAAM,2BAA2B,GAAG;AAC9D,MAAI,6BAA6B,SAAU,QAAO;AAClD,QAAM,UAAU;AAChB,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,UAAU,MAAM,qBAAqB,GAAG;AAC9C,MAAI,CAAC,SAAS;AACZ,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mCAAmC,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,QAAM,QAAQ,MAAM,eAAe,SAAS,OAAO;AACnD,MAAI,CAAC,OAAO;AACV,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,UAAU,mCAAmC,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACA,MAAI,CAAC,6BAA6B,IAAI,MAAM,MAAM,GAAG;AACnD,WAAO,aAAa;AAAA,MAClB,EAAE,IAAI,OAAO,OAAO,UAAU,4CAA4C,oCAAoC,EAAE;AAAA,MAChH,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,0BAA0B,KAAK,SAAS,MAAM,IAAI;AAAA,IACtE,IAAI,MAAM;AAAA,IACV,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AACD,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,QAAQ;AAAA,EACjB;AAEA,QAAM,aAAa,QAAQ,WAAW,UAAU,QAAQ,YAAY;AACpE,MAAI;AACF,UAAM,WAAW;AAAA,MACf;AAAA,MACA;AAAA,QACE,OAAO,EAAE,IAAI,MAAM,IAAI,UAAU,aAAa,iBAAiB,QAAQ,WAAW;AAAA,QAClF,KAAK,QAAQ;AAAA,MACf;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM;AAAA,EACR;AAEA,QAAM,QAAQ,gBAAgB;AAE9B,SAAO,aAAa,KAAK,EAAE,IAAI,MAAM,SAAS,MAAM,IAAI,QAAQ,YAAY,CAAC;AAC/E;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,GAAG,QAAQ,EAAE,QAAQ,WAAW,EAAE,CAAC;AAAA,QAClG;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/warranty_claims/api/portal/claims/route.js

@@ -8,7 +8,7 @@ import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-muta
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { createLogger } from "@open-mercato/shared/lib/logger";
-import { getCustomerAuthFromRequest } from "@open-mercato/core/modules/customer_accounts/lib/customerAuth";
+import { resolveLinkedCustomerAuth } from "../../../lib/portalAuthGuard.js";
 import { WarrantyClaim, WarrantyClaimLine } from "../../../data/entities.js";
 import {
   claimStatusSchema,
@@ -100,14 +100,9 @@ function serializePortalClaim(claim, lines) {
   };
 }
 async function resolvePortalContext(req) {
-  const { translate } = await resolveTranslations();
-  const auth = await getCustomerAuthFromRequest(req);
-  if (!auth) {
-    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.unauthorized", "Unauthorized") }, { status: 401 });
-  }
-  if (!auth.customerEntityId) {
-    return NextResponse.json({ ok: false, error: translate("warranty_claims.errors.customerAccountNotLinked", "Customer account is not linked to a customer record") }, { status: 403 });
-  }
+  const authOrResponse = await resolveLinkedCustomerAuth(req);
+  if (authOrResponse instanceof Response) return authOrResponse;
+  const auth = authOrResponse;
   const container = await createRequestContainer();
   const em = container.resolve("em");
   const commandAuth = {